type=DAEMON_START msg=audit(1781247318.079:5308): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=726 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1781247318.092:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247318.114:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1781247318.133:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1781247318.133:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe87817a20 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781247318.133:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1781247318.133:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1781247318.133:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe87817a20 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781247318.133:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1781247318.133:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1781247318.133:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffe87817a20 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781247318.133:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1781247318.139:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1781247318.152:11): pid=748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247318.163:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247318.274:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247318.296:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247318.327:15): prog-id=21 op=LOAD
type=SERVICE_START msg=audit(1781247318.372:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247318.377:17): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1781247318.394:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247318.410:19): prog-id=23 op=LOAD
type=BPF msg=audit(1781247318.410:20): prog-id=24 op=LOAD
type=BPF msg=audit(1781247318.410:21): prog-id=25 op=LOAD
type=SERVICE_START msg=audit(1781247318.421:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247318.428:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247318.441:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247318.471:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247319.254:26): prog-id=26 op=LOAD
type=BPF msg=audit(1781247319.254:27): prog-id=27 op=LOAD
type=SERVICE_START msg=audit(1781247319.335:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247319.457:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247319.537:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247319.567:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsmcertd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247319.572:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247319.617:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247319.638:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247320.105:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247320.234:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1781247322.204:37): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1781247322.209:38): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1781247322.209:39): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1781247322.209:40): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1781247322.209:41): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1781247322.209:42): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1781247322.309:43): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=ACCT_LOCK msg=audit(1781247322.357:44): pid=1126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=SERVICE_START msg=audit(1781247322.997:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.037:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.044:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.050:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.055:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.059:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.064:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1781247323.080:52): pid=1147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.083:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781247323.083:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781247323.216:55): pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1218 suid=74 rport=43867 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247323.216:56): pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1218 suid=74 rport=43867 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781247323.341:57): pid=1282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781247323.370:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247323.389:59): pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1218 suid=74 rport=43867 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781247323.390:60): pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.402:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781247323.456:62): pid=1346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247323.482:63): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781247323.522:64): pid=1382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1391 suid=74 rport=64776 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247323.522:65): pid=1382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1391 suid=74 rport=64776 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247323.663:66): pid=1428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1437 suid=74 rport=17484 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247323.663:67): pid=1428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1437 suid=74 rport=17484 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781247323.707:68): pid=1382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1391 suid=74 rport=64776 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781247323.708:69): pid=1382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781247323.791:70): pid=1457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1466 suid=74 rport=17070 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247323.791:71): pid=1457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1466 suid=74 rport=17070 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781247323.841:72): pid=1428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1437 suid=74 rport=17484 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781247323.843:73): pid=1428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781247323.850:74): pid=1457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781247323.921:75): pid=1551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247324.105:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781247329.773:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247332.958:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781247349.584:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247349.619:80): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781247349.619:81): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1781247426.833:82): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=4177 suid=74 rport=46961 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=191.210.73.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247426.834:83): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=4177 suid=74 rport=46961 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=191.210.73.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781247429.909:84): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4177 suid=74 rport=46961 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=191.210.73.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781247429.910:85): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=191.210.73.33 addr=191.210.73.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781247429.911:86): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="operator" exe="/usr/sbin/sshd" hostname=? addr=191.210.73.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781247478.246:87): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4180 suid=74 rport=52668 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247478.246:88): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4180 suid=74 rport=52668 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781247478.409:89): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247478.409:90): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ee:0a:bb:13:43:96:9a:b3:dd:37:40:85:a0:27:c3:f3:80:30:31:54:08:5d:19:7e:b3:12:cc:fe:87:db:80:1e exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781247478.437:91): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247478.438:92): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4180 suid=74 rport=52668 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781247478.441:93): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781247478.441:94): pid=4179 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781247478.441:94): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdbe360300 a2=4 a3=3e8 items=0 ppid=1325 pid=4179 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781247478.441:94): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781247478.443:95): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781247478.482:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781247478.514:97): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1781247478.514:98): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1781247478.515:99): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781247478.515:100): pid=4183 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781247478.515:100): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc03640a30 a2=4 a3=3e8 items=0 ppid=1 pid=4183 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781247478.515:100): proctitle="(systemd)"
type=USER_START msg=audit(1781247478.517:101): pid=4183 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781247478.652:102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781247478.664:103): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781247478.669:104): pid=4193 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781247478.714:105): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247478.714:106): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247478.757:107): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247478.757:108): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247478.775:109): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247478.775:110): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247478.855:111): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247478.855:112): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247478.876:113): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247478.876:114): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247479.241:115): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247479.241:116): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247488.585:117): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247488.585:118): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247489.290:119): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247489.290:120): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247497.721:121): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247497.721:122): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247498.110:123): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247498.110:124): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247500.129:125): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247500.130:126): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247500.332:127): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247500.332:128): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247503.108:129): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247503.108:130): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247503.373:131): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247503.373:132): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247503.872:133): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247503.872:134): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247504.087:135): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247504.087:136): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247504.510:137): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247504.510:138): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247504.545:139): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247504.545:140): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247504.555:141): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247504.555:142): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247504.596:143): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247504.596:144): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247504.611:145): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247504.612:146): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247504.639:147): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247504.639:148): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247504.652:149): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247504.652:150): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247504.851:151): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247504.851:152): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247504.876:153): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247504.876:154): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247504.918:155): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247504.918:156): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247504.934:157): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247504.934:158): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247504.967:159): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247504.967:160): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247504.979:161): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247504.979:162): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247505.183:163): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247505.184:164): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247505.202:165): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247505.202:166): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247505.234:167): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247505.234:168): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.173:169): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.173:170): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.205:171): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.205:172): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.220:173): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.220:174): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.257:175): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.257:176): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.275:177): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.275:178): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.306:179): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.306:180): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.325:181): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.325:182): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.518:183): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.518:184): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.544:185): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.544:186): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.584:187): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.584:188): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.605:189): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.605:190): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.638:191): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.638:192): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.652:193): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.652:194): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.851:195): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.851:196): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247506.867:197): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247506.867:198): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247506.900:199): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247506.900:200): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247508.991:201): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247508.991:202): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247509.188:203): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247509.189:204): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247510.585:205): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247510.585:206): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247511.289:207): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247511.289:208): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247514.464:209): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247514.464:210): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247514.688:211): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247514.688:212): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247516.989:213): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247516.990:214): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247517.195:215): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247517.195:216): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247517.233:217): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247517.233:218): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247517.418:219): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247517.418:220): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247517.444:221): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247517.444:222): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247517.649:223): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247517.649:224): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247518.550:225): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247518.550:226): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247518.761:227): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247518.762:228): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247518.784:229): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247518.785:230): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247518.985:231): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247518.985:232): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247519.003:233): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247519.003:234): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247519.192:235): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247519.192:236): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247521.909:237): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247521.909:238): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247521.984:239): pid=4781 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247521.984:240): pid=4781 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66677063686B6D7863667A7965646173727763786B777272796C6E6F69737662203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247521.985:241): pid=4781 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247521.990:242): pid=4781 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247522.187:243): pid=4781 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247522.187:244): pid=4781 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247522.191:245): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247522.191:246): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247522.681:247): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247522.681:248): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247522.711:249): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247522.711:250): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247522.723:251): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247522.724:252): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247522.758:253): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247522.758:254): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247522.845:255): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247522.845:256): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247522.904:257): pid=4829 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247522.904:258): pid=4829 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E64647466796F676E7A776562676D6F64666469736864746D6D70666274686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247522.905:259): pid=4829 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247522.908:260): pid=4829 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247523.070:261): pid=4829 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247523.070:262): pid=4829 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247523.074:263): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247523.074:264): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247523.090:265): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247523.091:266): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247523.126:267): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247523.127:268): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247523.136:269): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247523.137:270): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247523.168:271): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247523.169:272): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247523.387:273): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247523.387:274): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247523.449:275): pid=4872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247523.450:276): pid=4872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7465697761666B6A6A756A6C72736E7979737969796F6F757270707A7A716472203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247523.451:277): pid=4872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247523.454:278): pid=4872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247523.660:279): pid=4872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247523.660:280): pid=4872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247523.664:281): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247523.664:282): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247523.674:283): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247523.674:284): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247523.701:285): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247523.701:286): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247525.006:287): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247525.006:288): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247525.252:289): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247525.252:290): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247525.279:291): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247525.279:292): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247525.541:293): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247525.542:294): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247525.570:295): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247525.570:296): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247525.820:297): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247525.820:298): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247525.848:299): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247525.849:300): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247526.117:301): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247526.117:302): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247526.142:303): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247526.142:304): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247526.399:305): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247526.399:306): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247526.423:307): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247526.423:308): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247526.674:309): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247526.674:310): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247526.694:311): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247526.694:312): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247526.948:313): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247526.949:314): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247526.980:315): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247526.980:316): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247527.245:317): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247527.245:318): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247527.300:319): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247527.300:320): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247527.527:321): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247527.527:322): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247527.559:323): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247527.559:324): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247527.819:325): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247527.820:326): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247527.841:327): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247527.841:328): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247528.071:329): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247528.071:330): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247528.102:331): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247528.102:332): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247528.308:333): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247528.308:334): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247528.333:335): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247528.333:336): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247528.559:337): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247528.559:338): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247528.607:339): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247528.607:340): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247528.833:341): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247528.834:342): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247528.859:343): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247528.859:344): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247529.109:345): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247529.109:346): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247529.131:347): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247529.131:348): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247529.354:349): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247529.354:350): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247529.374:351): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247529.374:352): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247529.627:353): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247529.627:354): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247529.653:355): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247529.653:356): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247529.909:357): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247529.909:358): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247529.934:359): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247529.934:360): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247530.163:361): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247530.163:362): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247530.184:363): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247530.184:364): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247530.437:365): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247530.438:366): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247530.454:367): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247530.454:368): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247530.707:369): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247530.707:370): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247530.728:371): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247530.728:372): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247530.984:373): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247530.984:374): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247531.006:375): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247531.006:376): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247531.247:377): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247531.248:378): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247531.269:379): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247531.269:380): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247531.531:381): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247531.531:382): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247531.566:383): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247531.566:384): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247531.816:385): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247531.816:386): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247531.845:387): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247531.845:388): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247532.067:389): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247532.067:390): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247539.513:391): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247539.513:392): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247539.576:393): pid=5266 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247539.576:394): pid=5266 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68616975726C6A6563796C76706C7661716A71686F6F616865646773726D6977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247539.577:395): pid=5266 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247539.580:396): pid=5266 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1781247539.771:397): prog-id=28 op=LOAD
type=BPF msg=audit(1781247539.771:398): prog-id=29 op=LOAD
type=BPF msg=audit(1781247539.771:399): prog-id=30 op=LOAD
type=SERVICE_START msg=audit(1781247539.840:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781247539.903:401): pid=5266 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247539.903:402): pid=5266 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247539.907:403): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247539.907:404): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247541.537:405): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247541.537:406): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247541.596:407): pid=5287 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247541.597:408): pid=5287 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D667072766B746F7369756D78716B78627A736569667A6E72616375697270203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247541.598:409): pid=5287 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247541.601:410): pid=5287 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247541.776:411): pid=5287 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247541.776:412): pid=5287 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247541.781:413): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247541.781:414): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247542.268:415): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247542.268:416): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247542.294:417): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247542.294:418): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247542.308:419): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247542.308:420): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247542.341:421): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247542.341:422): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247542.364:423): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247542.365:424): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247542.554:425): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247542.554:426): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247542.584:427): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247542.585:428): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247542.623:429): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247542.623:430): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247542.645:431): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247542.645:432): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247542.681:433): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247542.682:434): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247542.699:435): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247542.699:436): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247542.913:437): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247542.913:438): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247542.933:439): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247542.933:440): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247542.962:441): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247542.962:442): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247543.796:443): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247543.796:444): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247543.827:445): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247543.827:446): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247543.846:447): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247543.846:448): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247543.884:449): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247543.885:450): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247543.905:451): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247543.906:452): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247544.102:453): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247544.102:454): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247544.120:455): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247544.120:456): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247544.157:457): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247544.157:458): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247544.174:459): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247544.174:460): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247544.207:461): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247544.207:462): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247544.229:463): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247544.229:464): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247544.437:465): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247544.437:466): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247544.450:467): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247544.450:468): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247544.482:469): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247544.482:470): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247546.022:471): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247546.022:472): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247546.052:473): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247546.052:474): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247546.063:475): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247546.063:476): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247546.102:477): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247546.102:478): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247546.114:479): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247546.115:480): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247546.179:481): pid=5537 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247546.179:482): pid=5537 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F6A74727561696475777A6369766271796D6A7A6566647468797867776163203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247546.181:483): pid=5537 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247546.184:484): pid=5537 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247546.352:485): pid=5537 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247546.353:486): pid=5537 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247546.357:487): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247546.357:488): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247546.382:489): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247546.382:490): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247546.420:491): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247546.421:492): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247546.432:493): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247546.432:494): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247546.464:495): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247546.464:496): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247546.476:497): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247546.476:498): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247546.533:499): pid=5580 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247546.533:500): pid=5580 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69686E776C7266686575787474626D7361716C65616778706662726C6373696A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247546.543:501): pid=5580 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247546.547:502): pid=5580 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247546.733:503): pid=5580 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247546.733:504): pid=5580 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247546.741:505): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247546.741:506): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247546.753:507): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247546.753:508): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247546.782:509): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247546.782:510): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247547.824:511): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247547.824:512): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247548.042:513): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247548.042:514): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247548.070:515): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247548.070:516): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247548.277:517): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247548.277:518): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247549.092:519): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247549.092:520): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247549.122:521): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247549.122:522): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247549.135:523): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247549.135:524): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247549.171:525): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247549.171:526): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247549.182:527): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247549.182:528): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247549.231:529): pid=5674 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247549.232:530): pid=5674 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A6368676C7278736C706474636A6E74686E7470706E6A676C686B74657162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247549.232:531): pid=5674 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247549.235:532): pid=5674 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247549.395:533): pid=5674 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247549.395:534): pid=5674 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247549.399:535): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247549.399:536): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247549.425:537): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247549.426:538): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247549.461:539): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247549.461:540): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247549.477:541): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247549.477:542): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247549.505:543): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247549.505:544): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247549.527:545): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247549.527:546): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247549.580:547): pid=5717 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247549.580:548): pid=5717 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A736467736D63626D7061756E6E6376666675717879706E6B72686D61797278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247549.581:549): pid=5717 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247549.583:550): pid=5717 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247549.729:551): pid=5717 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247549.730:552): pid=5717 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247549.734:553): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247549.734:554): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247549.746:555): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247549.746:556): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247549.773:557): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247549.773:558): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247551.075:559): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247551.075:560): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247551.135:561): pid=5748 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247551.135:562): pid=5748 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70756C666E65786B62776F6A6A6D677A7166716975767575737270647165796F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247551.136:563): pid=5748 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247551.138:564): pid=5748 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247551.309:565): pid=5748 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247551.309:566): pid=5748 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247551.313:567): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247551.313:568): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247562.176:569): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247562.176:570): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247562.380:571): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247562.381:572): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1781247569.915:573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247569.924:574): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781247569.924:575): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781247569.924:576): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1781247574.262:577): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247574.262:578): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247574.467:579): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247574.467:580): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247594.173:581): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247594.173:582): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247594.231:583): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247594.231:584): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B656A746D6874647777677467756A6D636B66657A7871726968696E7A6A6A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247594.232:585): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247594.235:586): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247594.388:587): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247594.389:588): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247594.393:589): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247594.393:590): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781247654.457:591): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4193 suid=1000 rport=52668 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781247654.461:592): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781247654.461:593): pid=4179 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781247759.039:594): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5827 suid=74 rport=35832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247759.039:595): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5827 suid=74 rport=35832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781247759.101:596): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781247759.108:597): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781247759.136:598): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247759.136:599): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781247759.165:600): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247759.165:601): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5827 suid=74 rport=35832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781247759.167:602): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781247759.168:603): pid=5826 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781247759.168:603): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe0eabe180 a2=4 a3=3e8 items=0 ppid=1325 pid=5826 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781247759.168:603): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781247759.169:604): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781247759.188:605): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781247759.190:606): pid=5829 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781247759.233:607): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247759.233:608): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247759.436:609): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247759.436:610): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247772.184:611): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247772.184:612): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247772.213:613): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247772.213:614): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247772.228:615): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247772.228:616): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247772.262:617): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247772.262:618): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247772.292:619): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247772.292:620): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247772.351:621): pid=5891 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247772.351:622): pid=5891 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E637574776D697164776176786876756B757164656E6D72727762676B6D76203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247772.352:623): pid=5891 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247772.356:624): pid=5891 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247772.488:625): pid=5891 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247772.488:626): pid=5891 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247772.492:627): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247772.492:628): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247772.517:629): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247772.517:630): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247772.546:631): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247772.546:632): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247772.564:633): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247772.564:634): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247772.588:635): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247772.589:636): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247772.606:637): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247772.606:638): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247772.650:639): pid=5934 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247772.650:640): pid=5934 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B776E6C6C6D6476697468696E7364697563787175766F74716C6C7A6A6D6970203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247772.651:641): pid=5934 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247772.653:642): pid=5934 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247772.822:643): pid=5934 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247772.823:644): pid=5934 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247772.827:645): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247772.827:646): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247772.844:647): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247772.844:648): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247772.872:649): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247772.872:650): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247773.022:651): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247773.022:652): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247773.079:653): pid=5964 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247773.079:654): pid=5964 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A7976706D757669697779706F64656F7A76617776766A6F666E7470676162203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247773.080:655): pid=5964 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247773.082:656): pid=5964 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1781247773.363:657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247773.393:658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781247773.417:659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247773.454:660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247773.465:661): prog-id=31 op=LOAD
type=BPF msg=audit(1781247773.465:662): prog-id=32 op=LOAD
type=USER_END msg=audit(1781247773.482:663): pid=5964 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247773.483:664): pid=5964 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247773.487:665): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247773.487:666): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1781247773.535:667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781247773.610:668): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247773.610:669): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247773.807:670): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247773.807:671): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1781247783.680:672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781247803.569:673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781247803.612:674): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781247803.612:675): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781247818.827:676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781247818.836:677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781247828.873:678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247833.869:679): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5829 suid=1000 rport=35832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781247833.873:680): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781247833.874:681): pid=5826 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781247848.625:682): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=6069 suid=74 rport=48101 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=144.48.121.126 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247848.626:683): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=6069 suid=74 rport=48101 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=144.48.121.126 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781247852.456:684): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6069 suid=74 rport=48101 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=144.48.121.126 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781247852.456:685): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.48.121.126 addr=144.48.121.126 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781247852.457:686): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.48.121.126 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781247930.027:687): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6071 suid=74 rport=58910 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781247930.028:688): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6071 suid=74 rport=58910 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781247930.093:689): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781247930.099:690): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781247930.127:691): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247930.127:692): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781247930.159:693): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781247930.159:694): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6071 suid=74 rport=58910 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781247930.161:695): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781247930.161:696): pid=6070 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781247930.161:696): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffc9b69140 a2=4 a3=3e8 items=0 ppid=1325 pid=6070 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781247930.161:696): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781247930.163:697): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781247930.182:698): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781247930.184:699): pid=6073 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781247930.228:700): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247930.228:701): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247930.259:702): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247930.259:703): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247930.278:704): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247930.278:705): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247930.313:706): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247930.313:707): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247930.365:708): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247930.365:709): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247930.428:710): pid=6119 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247930.428:711): pid=6119 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D776E6165666877746C616E717A71676E61786873686C777A666878756473203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247930.430:712): pid=6119 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247930.434:713): pid=6119 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247930.601:714): pid=6119 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247930.601:715): pid=6119 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247930.606:716): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247930.606:717): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247930.631:718): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247930.631:719): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247930.668:720): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247930.668:721): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247930.685:722): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247930.685:723): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247930.714:724): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247930.714:725): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247930.730:726): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247930.730:727): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781247930.775:728): pid=6162 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781247930.775:729): pid=6162 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E6B786674666F6D696D6F6770677272626E73626577656263696764636572203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781247930.775:730): pid=6162 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781247930.777:731): pid=6162 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247930.941:732): pid=6162 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781247930.941:733): pid=6162 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781247930.945:734): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247930.945:735): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781247930.960:736): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781247930.960:737): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781247930.988:738): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781247930.988:739): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781247936.418:740): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6073 suid=1000 rport=58910 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781247936.419:741): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781247936.420:742): pid=6070 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781248213.194:743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781248213.194:744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781248213.692:745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781248213.692:746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781248448.840:747): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6187 suid=74 rport=34674 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248448.840:748): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6187 suid=74 rport=34674 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781248448.903:749): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248448.909:750): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248448.930:751): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248448.930:752): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781248448.959:753): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248448.959:754): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6187 suid=74 rport=34674 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781248448.961:755): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781248448.961:756): pid=6186 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781248448.961:756): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffac847e10 a2=4 a3=3e8 items=0 ppid=1325 pid=6186 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781248448.961:756): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781248448.962:757): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781248448.981:758): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781248448.983:759): pid=6189 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781248449.026:760): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248449.026:761): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248449.087:762): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248449.088:763): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7863776371776F657175736D71736B666B6C796F7570636665757A7274646E6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248449.089:764): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248449.093:765): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248449.287:766): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248449.287:767): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248449.291:768): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248449.291:769): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248450.612:770): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248450.612:771): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248450.671:772): pid=6222 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248450.672:773): pid=6222 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757978697176706D686264647178706A6B63627961636B6368616A7A6F69706D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248450.673:774): pid=6222 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248450.676:775): pid=6222 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248450.841:776): pid=6222 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248450.841:777): pid=6222 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248450.845:778): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248450.845:779): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248450.871:780): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248450.871:781): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248450.917:782): pid=6238 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248450.917:783): pid=6238 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7370696978717468627169776C6D72736F6774636F7279766B64637374797468203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248450.917:784): pid=6238 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248450.920:785): pid=6238 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248451.047:786): pid=6238 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248451.047:787): pid=6238 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248451.051:788): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248451.051:789): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248451.078:790): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248451.079:791): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248451.133:792): pid=6254 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248451.133:793): pid=6254 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797361686B61756F75626C626D74616F76667271687A786F7265696F6B70696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248451.134:794): pid=6254 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248451.137:795): pid=6254 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248451.306:796): pid=6254 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248451.306:797): pid=6254 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248451.309:798): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248451.309:799): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248451.336:800): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248451.336:801): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248451.387:802): pid=6270 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248451.388:803): pid=6270 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706671786C7767797067707278626B7775726F70627772777467656A786C7A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248451.388:804): pid=6270 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248451.391:805): pid=6270 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248451.554:806): pid=6270 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248451.554:807): pid=6270 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248451.557:808): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248451.558:809): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248452.883:810): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248452.884:811): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248452.935:812): pid=6286 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248452.935:813): pid=6286 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D73676C756177776E656B73777570747068686A7A6C73676E727A687A6F6864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248452.935:814): pid=6286 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248452.937:815): pid=6286 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248453.114:816): pid=6286 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248453.114:817): pid=6286 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248453.118:818): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248453.118:819): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248453.569:820): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248453.569:821): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248453.600:822): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248453.600:823): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248453.617:824): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248453.617:825): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248453.653:826): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248453.653:827): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248453.668:828): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248453.669:829): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248453.727:830): pid=6334 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248453.728:831): pid=6334 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6578626C716275667373686C6F6E79796C6374697077756C626F696363626A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248453.729:832): pid=6334 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248453.731:833): pid=6334 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248453.860:834): pid=6334 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248453.860:835): pid=6334 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248453.864:836): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248453.865:837): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248453.892:838): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248453.892:839): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248453.927:840): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248453.927:841): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248453.945:842): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248453.945:843): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248453.975:844): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248453.975:845): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248454.000:846): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248454.000:847): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248454.056:848): pid=6377 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248454.056:849): pid=6377 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6D736373706A6173676F7475676F6A636A696B657862656F6F71726B70786A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248454.057:850): pid=6377 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248454.059:851): pid=6377 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248454.235:852): pid=6377 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248454.236:853): pid=6377 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248454.239:854): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248454.239:855): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248454.251:856): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248454.251:857): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248454.278:858): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248454.278:859): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248455.677:860): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248455.677:861): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248455.736:862): pid=6407 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248455.737:863): pid=6407 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A736179716E7165776E65696C6D6273737761716E6F72686E666A6E686266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248455.738:864): pid=6407 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248455.742:865): pid=6407 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1781248456.224:866): prog-id=33 op=LOAD
type=BPF msg=audit(1781248456.224:867): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.224:868): prog-id=34 op=LOAD
type=BPF msg=audit(1781248456.224:869): prog-id=35 op=LOAD
type=BPF msg=audit(1781248456.224:870): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.224:871): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.224:872): prog-id=36 op=LOAD
type=BPF msg=audit(1781248456.224:873): prog-id=37 op=LOAD
type=BPF msg=audit(1781248456.224:874): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.224:875): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.226:876): prog-id=38 op=LOAD
type=BPF msg=audit(1781248456.226:877): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.227:878): prog-id=39 op=LOAD
type=BPF msg=audit(1781248456.227:879): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.228:880): prog-id=40 op=LOAD
type=BPF msg=audit(1781248456.228:881): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.228:882): prog-id=41 op=LOAD
type=BPF msg=audit(1781248456.228:883): prog-id=42 op=LOAD
type=BPF msg=audit(1781248456.228:884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248456.228:885): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781248456.262:886): pid=6407 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248456.262:887): pid=6407 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248456.266:888): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248456.267:889): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248457.551:890): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248457.551:891): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248457.612:892): pid=6454 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248457.612:893): pid=6454 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7779796C6C77677062737A626F7962706A7376686A6165746867717A79636B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248457.613:894): pid=6454 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248457.617:895): pid=6454 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248457.785:896): pid=6454 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248457.785:897): pid=6454 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248457.789:898): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248457.789:899): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248458.381:900): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248458.381:901): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248458.443:902): pid=6470 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248458.443:903): pid=6470 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7461726C63736161616978696D70687167697961686378786E65676B76677361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248458.444:904): pid=6470 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248458.447:905): pid=6470 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248458.615:906): pid=6470 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248458.615:907): pid=6470 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248458.619:908): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248458.619:909): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248458.650:910): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248458.650:911): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248458.705:912): pid=6488 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248458.705:913): pid=6488 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6962706D676D69667364767868756C67736B676A707876786871756B6C706A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248458.706:914): pid=6488 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248458.709:915): pid=6488 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248458.863:916): pid=6488 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248458.864:917): pid=6488 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248458.868:918): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248458.868:919): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248458.902:920): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248458.902:921): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248458.945:922): pid=6506 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248458.946:923): pid=6506 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746779786E7A71616E616867716765767A64777665747868756E72656E707A74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248458.946:924): pid=6506 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248458.949:925): pid=6506 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248459.085:926): pid=6506 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248459.085:927): pid=6506 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248459.089:928): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248459.089:929): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248459.123:930): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248459.123:931): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248459.175:932): pid=6524 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248459.175:933): pid=6524 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B706A6B657065796176716C757261796E667A646D74727370726A66637677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248459.176:934): pid=6524 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248459.179:935): pid=6524 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248459.327:936): pid=6524 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248459.328:937): pid=6524 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248459.332:938): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248459.332:939): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248461.066:940): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248461.066:941): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248461.266:942): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248461.266:943): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248462.564:944): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248462.564:945): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248462.737:946): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248462.737:947): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781248465.569:948): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6189 suid=1000 rport=34674 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781248465.572:949): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781248465.572:950): pid=6186 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781248517.988:951): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6572 suid=74 rport=32814 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248517.988:952): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6572 suid=74 rport=32814 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781248518.050:953): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248518.056:954): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248518.122:955): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248518.122:956): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781248518.151:957): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248518.151:958): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6572 suid=74 rport=32814 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781248518.154:959): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781248518.154:960): pid=6571 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781248518.154:960): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcdcf9e3a0 a2=4 a3=3e8 items=0 ppid=1325 pid=6571 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781248518.154:960): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781248518.155:961): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781248518.172:962): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781248518.174:963): pid=6574 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781248518.217:964): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248518.217:965): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248518.282:966): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248518.282:967): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70657562697A6E786D6E6362697575686273687365656C6F766667646F6D7275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248518.283:968): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248518.287:969): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781248520.076:970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781248525.542:971): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248525.543:972): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248525.548:973): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248525.548:974): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248531.485:975): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248531.485:976): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248531.690:977): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248531.690:978): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248532.439:979): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248532.439:980): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248532.485:981): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248532.485:982): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B687674637976686B746772717574786A776D6C6676736A7167767A6E667866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248532.486:983): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248532.488:984): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=MAC_CONFIG_CHANGE msg=audit(1781248562.005:985): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=6AUID="zuul"
type=SYSCALL msg=audit(1781248562.005:985): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffe7ad290e a2=2 a3=0 items=0 ppid=6779 pid=6780 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781248562.005:985): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1781248571.855:986): auid=1000 ses=6 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1781248571.855:986): arch=c000003e syscall=1 success=yes exit=3537292 a0=4 a1=7fdc75e00000 a2=35f98c a3=0 items=0 ppid=6779 pid=6797 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781248571.855:986): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1781248584.415:987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra8ba386d8697459c84fc62eb5141b537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781248584.639:988): prog-id=43 op=LOAD
type=BPF msg=audit(1781248584.639:989): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.639:990): prog-id=44 op=LOAD
type=BPF msg=audit(1781248584.639:991): prog-id=45 op=LOAD
type=BPF msg=audit(1781248584.639:992): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.639:993): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.640:994): prog-id=46 op=LOAD
type=BPF msg=audit(1781248584.640:995): prog-id=47 op=LOAD
type=BPF msg=audit(1781248584.640:996): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.640:997): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.641:998): prog-id=48 op=LOAD
type=BPF msg=audit(1781248584.642:999): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.642:1000): prog-id=49 op=LOAD
type=BPF msg=audit(1781248584.642:1001): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.644:1002): prog-id=50 op=LOAD
type=BPF msg=audit(1781248584.644:1003): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.644:1004): prog-id=51 op=LOAD
type=BPF msg=audit(1781248584.644:1005): prog-id=52 op=LOAD
type=BPF msg=audit(1781248584.644:1006): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781248584.644:1007): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1781248584.672:1008): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.672:1009): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.229.0-1.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.672:1010): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.672:1011): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.672:1012): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.8-6.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1013): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nftables-1:1.0.4-10.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1014): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="shadow-utils-subid-2:4.9-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1015): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1016): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1017): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.11-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1018): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conmon-2:2.1.7-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1019): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="aardvark-dns-2:1.5.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1020): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="netavark-2:1.5.1-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1021): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yajl-2.1.0-21.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1022): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnet-1.2-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1023): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1024): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-libs-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.673:1025): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="crun-1.8.4-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.674:1026): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-7.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.674:1027): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.2.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.674:1028): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containers-common-2:1-52.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781248584.674:1029): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="podman-2:4.4.1-22.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_END msg=audit(1781248585.922:1030): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248585.923:1031): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248585.929:1032): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248585.929:1033): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1781248593.480:1034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781248593.480:1035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781248593.482:1036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra8ba386d8697459c84fc62eb5141b537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781248639.230:1037): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248639.230:1038): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248639.290:1039): pid=18372 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248639.290:1040): pid=18372 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C756177736D7065736F63767A69746B6D6B6275706163696D74746B747A7571203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248639.291:1041): pid=18372 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248639.297:1042): pid=18372 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248640.207:1043): pid=18372 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248640.207:1044): pid=18372 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248640.211:1045): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248640.211:1046): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248640.255:1047): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248640.255:1048): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248641.343:1049): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248641.343:1050): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781248643.343:1051): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6574 suid=1000 rport=32814 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781248643.347:1052): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781248643.347:1053): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781248658.375:1054): pid=18444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781248658.378:1055): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18446 suid=74 rport=41074 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248658.378:1056): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18446 suid=74 rport=41074 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781248658.388:1057): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18446 suid=74 rport=41074 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781248658.389:1058): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781248658.392:1059): pid=18443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781248658.394:1060): pid=18442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18448 suid=74 rport=41082 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248658.394:1061): pid=18442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18448 suid=74 rport=41082 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781248658.396:1062): pid=18442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18448 suid=74 rport=41082 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781248658.397:1063): pid=18442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781248658.400:1064): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781248663.095:1065): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18451 suid=74 rport=54398 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248663.095:1066): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18451 suid=74 rport=54398 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781248663.158:1067): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248663.163:1068): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248663.215:1069): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248663.215:1070): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781248663.237:1071): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248663.237:1072): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18451 suid=74 rport=54398 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781248663.239:1073): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781248663.239:1074): pid=18450 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781248663.239:1074): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe7334f0a0 a2=4 a3=3e8 items=0 ppid=1325 pid=18450 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781248663.239:1074): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781248663.240:1075): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781248663.259:1076): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781248663.261:1077): pid=18453 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781248663.304:1078): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248663.304:1079): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248663.565:1080): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248663.565:1081): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248664.271:1082): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248664.271:1083): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248664.338:1084): pid=18481 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248664.338:1085): pid=18481 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707361716278656B727176767A6A6B706D706E6F61696C7476756A736C6D656C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248664.339:1086): pid=18481 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248664.344:1087): pid=18481 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248664.537:1088): pid=18481 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248664.538:1089): pid=18481 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248664.543:1090): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248664.543:1091): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781248666.148:1092): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18453 suid=1000 rport=54398 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781248666.151:1093): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781248666.152:1094): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781248747.827:1095): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18488 suid=74 rport=32832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248747.827:1096): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18488 suid=74 rport=32832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781248747.890:1097): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248747.896:1098): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781248747.946:1099): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248747.946:1100): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781248747.974:1101): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248747.974:1102): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18488 suid=74 rport=32832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781248747.977:1103): pid=18487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781248747.977:1104): pid=18487 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781248747.977:1104): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffecfb8fee0 a2=4 a3=3e8 items=0 ppid=1325 pid=18487 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781248747.977:1104): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781248747.978:1105): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781248747.995:1106): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781248747.998:1107): pid=18490 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781248748.040:1108): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248748.040:1109): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248748.100:1110): pid=18504 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248748.100:1111): pid=18504 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787173666F736E6B61776B626C6E796B73766C767174656A7178656C68657861203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248748.101:1112): pid=18504 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248748.105:1113): pid=18504 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248748.309:1114): pid=18504 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248748.309:1115): pid=18504 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248748.314:1116): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248748.314:1117): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248749.238:1118): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248749.238:1119): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248749.296:1120): pid=18520 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248749.296:1121): pid=18520 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A71726875686B68796C6279706769756F6B6D6379617476726A736A646465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248749.296:1122): pid=18520 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248749.299:1123): pid=18520 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248749.500:1124): pid=18520 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248749.500:1125): pid=18520 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248749.504:1126): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248749.504:1127): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248750.055:1128): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248750.055:1129): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248750.086:1130): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248750.086:1131): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248750.098:1132): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248750.098:1133): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248750.134:1134): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248750.134:1135): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248750.308:1136): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248750.308:1137): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248750.369:1138): pid=18570 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248750.370:1139): pid=18570 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A727A7265636674636561656D6E696373737461686C6B6B79737A7672697574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248750.370:1140): pid=18570 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248750.373:1141): pid=18570 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248750.538:1142): pid=18570 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248750.538:1143): pid=18570 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248750.542:1144): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248750.542:1145): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248750.571:1146): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248750.571:1147): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248750.607:1148): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248750.607:1149): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248750.621:1150): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248750.621:1151): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248750.651:1152): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248750.651:1153): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248750.891:1154): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248750.891:1155): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248750.950:1156): pid=18613 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248750.950:1157): pid=18613 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F6A6E6C767A74766666656C637164626C6B6A76747676707865656371737A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248750.951:1158): pid=18613 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248750.953:1159): pid=18613 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248751.121:1160): pid=18613 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248751.121:1161): pid=18613 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248751.125:1162): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248751.125:1163): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248751.139:1164): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248751.139:1165): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248751.170:1166): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248751.170:1167): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248752.178:1168): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248752.179:1169): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248752.210:1170): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248752.210:1171): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248752.221:1172): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248752.221:1173): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248752.256:1174): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248752.256:1175): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248752.271:1176): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248752.271:1177): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248752.329:1178): pid=18675 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248752.330:1179): pid=18675 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C65636A76676C636A736C666278687A7865687A7464627361646B6576697777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248752.330:1180): pid=18675 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248752.333:1181): pid=18675 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248752.488:1182): pid=18675 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248752.488:1183): pid=18675 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248752.492:1184): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248752.492:1185): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248752.525:1186): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248752.525:1187): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248752.562:1188): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248752.562:1189): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248752.586:1190): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248752.586:1191): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248752.616:1192): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248752.616:1193): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248752.633:1194): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248752.634:1195): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248752.693:1196): pid=18718 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248752.693:1197): pid=18718 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6776786D77766169756B79647466686C726E7271626D667863786C66767479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248752.694:1198): pid=18718 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248752.696:1199): pid=18718 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248752.875:1200): pid=18718 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248752.875:1201): pid=18718 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248752.879:1202): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248752.880:1203): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248752.896:1204): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248752.897:1205): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248752.929:1206): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248752.929:1207): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248754.644:1208): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248754.644:1209): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781248754.702:1210): pid=18748 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781248754.702:1211): pid=18748 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73786C757277736467667467677A62786670626565677366646C73727A716F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781248754.703:1212): pid=18748 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781248754.706:1213): pid=18748 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248754.879:1214): pid=18748 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781248754.880:1215): pid=18748 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781248754.883:1216): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248754.883:1217): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248755.370:1218): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248755.370:1219): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248755.398:1220): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248755.398:1221): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248755.414:1222): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248755.414:1223): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248755.447:1224): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248755.448:1225): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248755.467:1226): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248755.467:1227): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248755.676:1228): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248755.676:1229): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248755.698:1230): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248755.698:1231): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248755.851:1232): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248755.851:1233): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248755.867:1234): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248755.868:1235): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248755.896:1236): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248755.896:1237): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248756.752:1238): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248756.752:1239): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248756.781:1240): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248756.781:1241): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248756.796:1242): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248756.796:1243): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248756.829:1244): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248756.829:1245): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248756.846:1246): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248756.846:1247): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248757.045:1248): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248757.045:1249): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248757.059:1250): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248757.059:1251): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248757.251:1252): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248757.252:1253): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248757.266:1254): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248757.266:1255): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248757.292:1256): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248757.292:1257): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248758.606:1258): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248758.606:1259): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248758.634:1260): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248758.634:1261): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248758.649:1262): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248758.650:1263): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248758.683:1264): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248758.683:1265): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248758.703:1266): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248758.704:1267): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248758.910:1268): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248758.910:1269): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248758.930:1270): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248758.930:1271): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248759.135:1272): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248759.135:1273): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248759.147:1274): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248759.147:1275): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248759.175:1276): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248759.175:1277): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781248760.094:1278): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18490 suid=1000 rport=32832 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781248760.098:1279): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781248760.099:1280): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781248797.491:1281): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18981 suid=74 rport=38802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248797.492:1282): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18981 suid=74 rport=38802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781248799.043:1283): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18981 suid=74 rport=38802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781248799.044:1284): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.64.139.147 addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781248799.045:1285): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781248799.387:1286): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18983 suid=74 rport=38810 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248799.387:1287): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18983 suid=74 rport=38810 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781248800.233:1288): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18983 suid=74 rport=38810 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781248800.234:1289): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.64.139.147 addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781248800.234:1290): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781248800.557:1291): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18985 suid=74 rport=38816 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248800.557:1292): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18985 suid=74 rport=38816 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781248801.331:1293): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18985 suid=74 rport=38816 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781248801.332:1294): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.64.139.147 addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781248801.333:1295): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781248931.046:1296): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18987 suid=74 rport=47228 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781248931.046:1297): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18987 suid=74 rport=47228 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781248931.110:1298): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248931.110:1299): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781248931.139:1300): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.50 addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781248931.139:1301): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18987 suid=74 rport=47228 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781248931.141:1302): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.50 addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781248931.142:1303): pid=18986 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781248931.142:1303): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffae362650 a2=4 a3=3e8 items=0 ppid=1325 pid=18986 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781248931.142:1303): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781248931.143:1304): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.50 addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781248931.160:1305): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.50 addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781248931.162:1306): pid=18989 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.50 addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781248931.205:1307): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248931.205:1308): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248931.236:1309): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248931.236:1310): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248931.255:1311): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248931.255:1312): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248931.338:1313): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248931.338:1314): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781248931.360:1315): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781248931.360:1316): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781248931.557:1317): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781248931.557:1318): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781249231.469:1319): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18989 suid=1000 rport=47228 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.50 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781249231.472:1320): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.50 addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781249231.472:1321): pid=18986 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.50 addr=38.102.83.50 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781249270.632:1322): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=19038 suid=74 rport=37935 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=106.248.238.187 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781249270.633:1323): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=19038 suid=74 rport=37935 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=106.248.238.187 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781249278.493:1324): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=19040 suid=74 rport=37958 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=71.229.1.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781249278.493:1325): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=19040 suid=74 rport=37958 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=71.229.1.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781249280.357:1326): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19040 suid=74 rport=37958 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=71.229.1.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781249280.357:1327): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=71.229.1.186 addr=71.229.1.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781249280.358:1328): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=71.229.1.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781249630.707:1329): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19047 suid=74 rport=55908 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781249630.708:1330): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19047 suid=74 rport=55908 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781249630.770:1331): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781249630.777:1332): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781249630.835:1333): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781249630.835:1334): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781249630.863:1335): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781249630.864:1336): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19047 suid=74 rport=55908 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781249630.866:1337): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781249630.866:1338): pid=19046 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781249630.866:1338): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd96f93e60 a2=4 a3=3e8 items=0 ppid=1325 pid=19046 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781249630.866:1338): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781249630.868:1339): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781249630.885:1340): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781249630.887:1341): pid=19049 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781249630.929:1342): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249630.929:1343): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781249631.125:1344): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249631.125:1345): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249642.349:1346): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249642.350:1347): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249642.400:1348): pid=19083 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249642.401:1349): pid=19083 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A757A70657471657A666B6770757369686E77646D7867717563756E696467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249642.401:1350): pid=19083 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249642.404:1351): pid=19083 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249645.030:1352): pid=19083 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249645.031:1353): pid=19083 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249645.035:1354): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249645.035:1355): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249658.532:1356): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249658.532:1357): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249658.584:1358): pid=19102 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249658.584:1359): pid=19102 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6967626872786F6E6D79716A766D766167746978736C6A6A657A626466676261203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249658.584:1360): pid=19102 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249658.586:1361): pid=19102 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249688.132:1362): pid=19102 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249688.132:1363): pid=19102 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249688.136:1364): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249688.137:1365): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249718.014:1366): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249718.014:1367): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249718.080:1368): pid=19258 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249718.080:1369): pid=19258 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7464787A78616B796D70666A6B676478736573766975636462637468746F6F63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249718.081:1370): pid=19258 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249718.084:1371): pid=19258 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249723.904:1372): pid=19258 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249723.904:1373): pid=19258 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249723.907:1374): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249723.908:1375): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249729.904:1376): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249729.904:1377): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249729.955:1378): pid=19458 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249729.956:1379): pid=19458 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727064786E776462626C61716D636F6170647062796F74696376647163757867203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249729.956:1380): pid=19458 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249729.959:1381): pid=19458 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249746.263:1382): pid=19458 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249746.264:1383): pid=19458 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249746.269:1384): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249746.269:1385): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249763.500:1386): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249763.500:1387): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249763.559:1388): pid=19793 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249763.559:1389): pid=19793 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667778786F69646C6E706E73666566756B7A726F71666F6A736474636D686C69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249763.560:1390): pid=19793 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249763.563:1391): pid=19793 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249779.080:1392): pid=19793 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249779.080:1393): pid=19793 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249779.084:1394): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249779.084:1395): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249795.213:1396): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249795.213:1397): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249795.272:1398): pid=20128 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249795.272:1399): pid=20128 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7267747372646A696F78666E6B65756E6F7A7A647864736E756E717766696C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249795.273:1400): pid=20128 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249795.275:1401): pid=20128 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249812.231:1402): pid=20128 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249812.231:1403): pid=20128 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249812.235:1404): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249812.235:1405): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249829.144:1406): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249829.144:1407): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249829.200:1408): pid=20467 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249829.200:1409): pid=20467 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73616769626B75626E6C647172786F6F68676F70617677776E7A6E71676F6778203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249829.201:1410): pid=20467 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249829.203:1411): pid=20467 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249831.709:1412): pid=20467 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249831.709:1413): pid=20467 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249831.713:1414): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249831.714:1415): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249845.134:1416): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249845.134:1417): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249845.188:1418): pid=20486 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249845.189:1419): pid=20486 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C687078757863647269736F6B636262747572696D6B62636471777A6A7961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249845.189:1420): pid=20486 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249845.192:1421): pid=20486 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1781249856.979:1422): pid=20583 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=GRP_MGMT msg=audit(1781249856.983:1423): pid=20583 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=ADD_USER msg=audit(1781249857.042:1424): pid=20590 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="unbound" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=MAC_POLICY_LOAD msg=audit(1781249866.073:1425): auid=1000 ses=10 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1781249866.073:1425): arch=c000003e syscall=1 success=yes exit=3540283 a0=4 a1=7f9642200000 a2=36053b a3=0 items=0 ppid=20607 pid=20614 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781249866.073:1425): proctitle="/usr/sbin/load_policy"
type=ADD_GROUP msg=audit(1781249866.248:1426): pid=20617 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=GRP_MGMT msg=audit(1781249866.256:1427): pid=20617 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=ADD_USER msg=audit(1781249866.300:1428): pid=20624 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="openvswitch" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_GROUP msg=audit(1781249866.373:1429): pid=20632 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=GRP_MGMT msg=audit(1781249866.378:1430): pid=20632 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=USER_MGMT msg=audit(1781249866.427:1431): pid=20640 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1781249866.427:1432): pid=20640 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781249868.955:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r083c8bbcb78d47a19c8c942246926fda comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781249869.195:1434): prog-id=53 op=LOAD
type=BPF msg=audit(1781249869.195:1435): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.195:1436): prog-id=54 op=LOAD
type=BPF msg=audit(1781249869.195:1437): prog-id=55 op=LOAD
type=BPF msg=audit(1781249869.195:1438): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.195:1439): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.196:1440): prog-id=56 op=LOAD
type=BPF msg=audit(1781249869.196:1441): prog-id=57 op=LOAD
type=BPF msg=audit(1781249869.196:1442): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.196:1443): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.198:1444): prog-id=58 op=LOAD
type=BPF msg=audit(1781249869.198:1445): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.199:1446): prog-id=59 op=LOAD
type=BPF msg=audit(1781249869.199:1447): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.200:1448): prog-id=60 op=LOAD
type=BPF msg=audit(1781249869.200:1449): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.200:1450): prog-id=61 op=LOAD
type=BPF msg=audit(1781249869.200:1451): prog-id=62 op=LOAD
type=BPF msg=audit(1781249869.200:1452): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781249869.200:1453): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1454): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-netaddr-0.8.0-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1455): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-config-server-1:1.42.2-32.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1456): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyparsing-2.4.7-9.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1457): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="chkconfig-1.20-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1458): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-core-2.39.5-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1459): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pbr-5.5.1-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1460): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-ovs-1:1.42.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1461): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-iso8601-0.1.12-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1462): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-packaging-20.9-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1463): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-libs-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1464): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libnmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1465): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bc-1.07.1-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1466): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-rename-device-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1467): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1468): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1469): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-openvswitch3.3-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1470): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-network-scripts-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1471): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1472): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="unbound-libs-1.16.2-3.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1473): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nispor-1.2.10-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1474): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mstflint-4.23.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1475): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sshpass-1.09-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1476): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1477): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycparser-2.20-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1478): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cffi-1.14.5-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1479): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cryptography-36.0.1-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1480): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-greenlet-1.1.2-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.244:1481): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-eventlet-0.30.2-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1482): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch-selinux-extra-policy-1.0-39.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1483): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch3.3-3.3.7-11.el9fdp.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1484): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zipp-3.4.0-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1485): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-importlib-metadata-1.7.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1486): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-stevedore-3.3.3-17.1.20230621041426.7b48fff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1487): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wrapt-1.12.1-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1488): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-debtcollector-2.2.0-17.1.20230620164104.649189d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1489): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rfc3986-1.4.0-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1490): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-anyjson-0.3.3-26.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1491): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyroute2-0.6.6-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1492): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-utils-lang-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1493): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-i18n-lang-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1494): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-i18n-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1495): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-config-2:8.5.1-17.1.20230621105008.de1dbee.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1496): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-utils-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1497): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-concurrency-lang-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1498): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-fasteners-0.14.1-24.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1499): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-concurrency-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1500): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-net-config-14.2.1-17.1.20251114150843.61d7bd7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1501): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781249869.245:1502): pid=20488 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-ansible-core-2.14.2-4.7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781249870.024:1503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781249870.024:1504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781249870.026:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r083c8bbcb78d47a19c8c942246926fda comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781249870.764:1506): pid=20486 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249870.764:1507): pid=20486 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249870.771:1508): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249870.771:1509): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_SESSION msg=audit(1781249894.446:1510): pid=21680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=21681 suid=74 rport=41576 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781249894.447:1511): pid=21680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=21681 suid=74 rport=41576 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781249895.588:1512): pid=21680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21681 suid=74 rport=41576 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781249895.589:1513): pid=21680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781249895.590:1514): pid=21680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781249896.976:1515): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249896.976:1516): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249897.043:1517): pid=21696 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249897.044:1518): pid=21696 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78716A70696B696D7872707569656476686F6E7A6D6879737772656F6D796268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249897.044:1519): pid=21696 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249897.052:1520): pid=21696 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249949.916:1521): pid=21696 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249949.917:1522): pid=21696 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249949.922:1523): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249949.922:1524): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249997.558:1525): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249997.558:1526): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249997.621:1527): pid=21717 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249997.622:1528): pid=21717 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647162686C6A6B7A7562737A746766726276727A766872796B666B62696F6665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249997.623:1529): pid=21717 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249997.626:1530): pid=21717 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249997.797:1531): pid=21717 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249997.797:1532): pid=21717 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249997.801:1533): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249997.801:1534): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249998.252:1535): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249998.252:1536): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781249998.283:1537): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249998.283:1538): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249998.309:1539): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249998.309:1540): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781249998.345:1541): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249998.345:1542): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249998.475:1543): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249998.475:1544): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249998.534:1545): pid=21765 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249998.534:1546): pid=21765 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696B7A62737669797770626D676A75756866746368796A6F61676F64666B6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249998.535:1547): pid=21765 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249998.538:1548): pid=21765 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249998.698:1549): pid=21765 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249998.699:1550): pid=21765 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249998.703:1551): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249998.703:1552): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249998.725:1553): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249998.726:1554): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781249998.761:1555): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249998.762:1556): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249998.782:1557): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249998.782:1558): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781249998.810:1559): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249998.810:1560): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249998.935:1561): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249998.936:1562): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781249998.995:1563): pid=21808 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781249998.995:1564): pid=21808 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E7A69626A6E6F6466717465756776717770697677687068677276726A6D63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781249998.995:1565): pid=21808 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781249998.998:1566): pid=21808 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249999.167:1567): pid=21808 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781249999.168:1568): pid=21808 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781249999.171:1569): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249999.171:1570): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781249999.191:1571): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781249999.191:1572): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781249999.220:1573): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781249999.220:1574): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250000.339:1575): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250000.340:1576): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250000.400:1577): pid=21838 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250000.400:1578): pid=21838 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657678717366726967786C646C6E616165616D687A766F75776A626B676E6A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250000.401:1579): pid=21838 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250000.404:1580): pid=21838 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250000.620:1581): pid=21838 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250000.621:1582): pid=21838 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250000.625:1583): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250000.625:1584): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250000.656:1585): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250000.656:1586): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250000.712:1587): pid=21859 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250000.712:1588): pid=21859 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687575726C6268777176716C72786166666F657871796D687469716477787A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250000.713:1589): pid=21859 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250000.715:1590): pid=21859 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250000.923:1591): pid=21859 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250000.924:1592): pid=21859 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250000.927:1593): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250000.928:1594): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250000.953:1595): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250000.953:1596): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250001.003:1597): pid=21879 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250001.004:1598): pid=21879 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6862696D6E6B656C70726B616D656D746F686E6D6A7463677466746A69746267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250001.004:1599): pid=21879 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250001.006:1600): pid=21879 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250001.204:1601): pid=21879 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250001.204:1602): pid=21879 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250001.208:1603): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250001.208:1604): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250001.246:1605): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250001.246:1606): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250001.304:1607): pid=21899 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250001.305:1608): pid=21899 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736468676E7868726C766177706174766762716A707A637A6876777061666A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250001.305:1609): pid=21899 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250001.308:1610): pid=21899 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250001.503:1611): pid=21899 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250001.503:1612): pid=21899 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250001.507:1613): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250001.507:1614): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250001.529:1615): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250001.529:1616): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250001.577:1617): pid=21919 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250001.577:1618): pid=21919 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6C69736A6879766E616E7671736C6C7369666678677863746A74726566776F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250001.578:1619): pid=21919 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250001.580:1620): pid=21919 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250001.790:1621): pid=21919 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250001.790:1622): pid=21919 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250001.793:1623): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250001.793:1624): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250004.581:1625): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250004.581:1626): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250004.641:1627): pid=21939 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250004.641:1628): pid=21939 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D6179646C6A67676F716A6B656D757673616669746F797169766B7064746E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250004.642:1629): pid=21939 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250004.645:1630): pid=21939 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781250005.375:1631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781250005.400:1632): pid=21939 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250005.401:1633): pid=21939 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250005.405:1634): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250005.406:1635): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250005.445:1636): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250005.445:1637): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250005.504:1638): pid=22113 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250005.505:1639): pid=22113 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7461696361656262636E7A74756E737A6F626B7879676A796565726D6D6A7369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250005.505:1640): pid=22113 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250005.509:1641): pid=22113 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781250006.114:1642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovsdb-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781250006.142:1643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-delete-transient-ports comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781250006.386:1644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-vswitchd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781250006.392:1645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openvswitch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781250006.423:1646): pid=22113 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250006.423:1647): pid=22113 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250006.428:1648): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250006.428:1649): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250009.526:1650): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250009.526:1651): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250009.579:1652): pid=22277 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250009.580:1653): pid=22277 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75636C6964636E6878686567706A6E78796363796876726C776F75616A6B656A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250009.581:1654): pid=22277 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250009.585:1655): pid=22277 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ANOM_PROMISCUOUS msg=audit(1781250010.944:1656): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250010.944:1656): arch=c000003e syscall=46 success=yes exit=56 a0=15 a1=7fffbbc87bc0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250010.944:1656): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1781250010.979:1657): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250010.979:1657): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250010.979:1657): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1781250014.248:1658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1781250016.452:1659): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250016.452:1659): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250016.452:1659): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1781250016.662:1660): dev=vlan21 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250016.662:1660): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250016.662:1660): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1781250019.997:1661): dev=vlan44 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250019.997:1661): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250019.997:1661): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=CRYPTO_SESSION msg=audit(1781250020.387:1662): pid=22827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=22828 suid=74 rport=57676 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250020.388:1663): pid=22827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=22828 suid=74 rport=57676 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250022.100:1664): pid=22827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22828 suid=74 rport=57676 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250022.101:1665): pid=22827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250022.101:1666): pid=22827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1781250023.235:1667): dev=vlan22 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250023.235:1667): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250023.235:1667): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1781250024.272:1668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1781250026.518:1669): dev=vlan20 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250026.518:1669): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250026.518:1669): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1781250029.800:1670): dev=vlan23 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781250029.800:1670): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781250029.800:1670): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_END msg=audit(1781250039.298:1671): pid=22277 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250039.298:1672): pid=22277 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250039.303:1673): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250039.303:1674): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_SESSION msg=audit(1781250081.169:1675): pid=23559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=23560 suid=74 rport=36982 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.173.2.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250081.169:1676): pid=23559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=23560 suid=74 rport=36982 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.173.2.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250083.092:1677): pid=23559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23560 suid=74 rport=36982 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.173.2.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250083.093:1678): pid=23559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=31.173.2.182 addr=31.173.2.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250083.093:1679): pid=23559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.173.2.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250099.356:1680): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19049 suid=1000 rport=55908 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781250099.360:1681): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781250099.360:1682): pid=19046 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781250102.177:1683): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23563 suid=74 rport=58496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250102.177:1684): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23563 suid=74 rport=58496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781250102.240:1685): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250102.246:1686): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250102.278:1687): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250102.278:1688): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781250102.307:1689): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250102.307:1690): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23563 suid=74 rport=58496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781250102.309:1691): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781250102.310:1692): pid=23562 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781250102.310:1692): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc9ca70520 a2=4 a3=3e8 items=0 ppid=1325 pid=23562 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781250102.310:1692): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781250102.311:1693): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781250102.329:1694): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781250102.331:1695): pid=23565 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781250102.374:1696): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250102.374:1697): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250104.613:1698): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250104.613:1699): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250118.959:1700): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250118.959:1701): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250119.232:1702): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250119.232:1703): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250119.263:1704): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250119.263:1705): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250119.325:1706): pid=23613 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250119.326:1707): pid=23613 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63666564656573726D68697A736770796F72687375617A7270796F6F61697467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250119.326:1708): pid=23613 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250119.330:1709): pid=23613 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250119.560:1710): pid=23613 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250119.560:1711): pid=23613 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250119.565:1712): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250119.565:1713): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250121.060:1714): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250121.060:1715): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250121.326:1716): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250121.327:1717): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250121.382:1718): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250121.382:1719): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250121.443:1720): pid=23644 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250121.443:1721): pid=23644 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6C726C7279736262727871717574757062716562766B7770677966727575203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250121.444:1722): pid=23644 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250121.446:1723): pid=23644 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250121.668:1724): pid=23644 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250121.668:1725): pid=23644 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250121.672:1726): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250121.672:1727): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250122.407:1728): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250122.407:1729): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250122.606:1730): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250122.606:1731): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250123.092:1732): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250123.092:1733): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250123.297:1734): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250123.297:1735): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250133.854:1736): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250133.854:1737): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250133.914:1738): pid=23694 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250133.915:1739): pid=23694 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B646E6F7A7A6471757771676B777574687372637664776861627774636E7A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250133.915:1740): pid=23694 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250133.918:1741): pid=23694 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1781250134.098:1742): prog-id=63 op=LOAD
type=BPF msg=audit(1781250134.098:1743): prog-id=64 op=LOAD
type=SERVICE_START msg=audit(1781250134.157:1744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781250134.180:1745): pid=23694 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250134.180:1746): pid=23694 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781250134.181:1747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781250134.185:1748): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250134.185:1749): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1781250144.210:1750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250145.133:1751): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23565 suid=1000 rport=58496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781250145.136:1752): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781250145.136:1753): pid=23562 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781250147.348:1754): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23714 suid=74 rport=32988 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250147.348:1755): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23714 suid=74 rport=32988 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781250147.412:1756): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250147.418:1757): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250147.447:1758): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250147.447:1759): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781250147.479:1760): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250147.479:1761): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23714 suid=74 rport=32988 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781250147.481:1762): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781250147.482:1763): pid=23713 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781250147.482:1763): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffe6d9e6e0 a2=4 a3=3e8 items=0 ppid=1325 pid=23713 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781250147.482:1763): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781250147.484:1764): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781250147.502:1765): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781250147.505:1766): pid=23716 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781250147.548:1767): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250147.548:1768): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250147.748:1769): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250147.748:1770): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781250150.600:1771): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23716 suid=1000 rport=32988 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781250150.602:1772): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781250150.603:1773): pid=23713 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_STOP msg=audit(1781250164.197:1774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781250164.243:1775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250164.243:1776): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1781250198.933:1777): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23735 suid=74 rport=42944 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250198.933:1778): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23735 suid=74 rport=42944 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781250198.996:1779): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250199.002:1780): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250199.029:1781): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250199.029:1782): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781250199.059:1783): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250199.059:1784): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23735 suid=74 rport=42944 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781250199.062:1785): pid=23734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781250199.062:1786): pid=23734 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781250199.062:1786): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffefc5a5e90 a2=4 a3=3e8 items=0 ppid=1325 pid=23734 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781250199.062:1786): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781250199.064:1787): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781250199.082:1788): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781250199.085:1789): pid=23737 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781250199.128:1790): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250199.128:1791): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250199.194:1792): pid=23751 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250199.195:1793): pid=23751 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696B6573776B6A75776D61656A6777676969686D6263616B697277796969686E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250199.197:1794): pid=23751 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250199.203:1795): pid=23751 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1781250207.323:1796): pid=23816 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="printadmin"
type=GRP_MGMT msg=audit(1781250207.327:1797): pid=23816 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="printadmin"
type=BPF msg=audit(1781250208.152:1798): prog-id=65 op=LOAD
type=BPF msg=audit(1781250208.152:1799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.152:1800): prog-id=66 op=LOAD
type=BPF msg=audit(1781250208.152:1801): prog-id=67 op=LOAD
type=BPF msg=audit(1781250208.152:1802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.152:1803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.153:1804): prog-id=68 op=LOAD
type=BPF msg=audit(1781250208.153:1805): prog-id=69 op=LOAD
type=BPF msg=audit(1781250208.153:1806): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.153:1807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.154:1808): prog-id=70 op=LOAD
type=BPF msg=audit(1781250208.154:1809): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.155:1810): prog-id=71 op=LOAD
type=BPF msg=audit(1781250208.156:1811): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.157:1812): prog-id=72 op=LOAD
type=BPF msg=audit(1781250208.157:1813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.157:1814): prog-id=73 op=LOAD
type=BPF msg=audit(1781250208.157:1815): prog-id=74 op=LOAD
type=BPF msg=audit(1781250208.157:1816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250208.157:1817): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1781250216.770:1818): auid=1000 ses=13 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1781250216.770:1818): arch=c000003e syscall=1 success=yes exit=3577633 a0=4 a1=7f4261400000 a2=369721 a3=0 items=0 ppid=23872 pid=23880 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781250216.770:1818): proctitle="/usr/sbin/load_policy"
type=SERVICE_STOP msg=audit(1781250217.960:1819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781250217.980:1820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781250219.025:1821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r0703be30ff284a9986957e153955830e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781250219.291:1822): prog-id=75 op=LOAD
type=BPF msg=audit(1781250219.291:1823): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.291:1824): prog-id=76 op=LOAD
type=BPF msg=audit(1781250219.291:1825): prog-id=77 op=LOAD
type=BPF msg=audit(1781250219.291:1826): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.291:1827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.291:1828): prog-id=78 op=LOAD
type=BPF msg=audit(1781250219.291:1829): prog-id=79 op=LOAD
type=BPF msg=audit(1781250219.291:1830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.291:1831): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.293:1832): prog-id=80 op=LOAD
type=BPF msg=audit(1781250219.293:1833): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.294:1834): prog-id=81 op=LOAD
type=BPF msg=audit(1781250219.294:1835): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.295:1836): prog-id=82 op=LOAD
type=BPF msg=audit(1781250219.295:1837): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.295:1838): prog-id=83 op=LOAD
type=BPF msg=audit(1781250219.296:1839): prog-id=84 op=LOAD
type=BPF msg=audit(1781250219.296:1840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781250219.296:1841): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781250219.346:1842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8bb62eeece514cccb7c1fd0d99aa0f3c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1843): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-libs-1:3.0.7-18.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1844): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="krb5-libs-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1845): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nspr-4.35.0-17.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1846): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-util-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1847): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1848): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-modules-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1849): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ldap-3.4.3-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1850): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-gssapi-1.6.9-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1851): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cyrus-sasl-gssapi-2.1.27-21.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.365:1852): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="krb5-pkinit-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1853): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-common-0:4.17.5-105.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1854): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sssdconfig-2.8.2-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1855): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dns-2.2.1-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1856): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libipa_hbac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1857): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-client-common-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1858): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="augeas-libs-1.13.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1859): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-qrcode-core-6.1-12.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1860): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyusb-1.0.2-13.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1861): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-yubico-1.3.3-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1862): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-augeas-0.5.0-25.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1863): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libipa_hbac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1864): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-krb5-common-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1865): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-freebl-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1866): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1867): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1868): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-sysinit-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1869): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="certmonger-0.79.17-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1870): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-tools-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1871): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="autofs-1:5.1.7-36.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1872): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libkadm5-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1873): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="krb5-workstation-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1874): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libjose-11-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1875): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-idp-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1876): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sss-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1877): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sss-murmur-2.8.2-5.el9_2.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1878): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-dbus-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1879): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-tools-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1880): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libsss_autofs-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1881): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="avahi-libs-0.8-12.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1882): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libwbclient-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1883): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-common-libs-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1884): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-client-libs-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1885): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-common-pac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1886): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-11.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1887): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-selinux-4.10.1-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1888): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-common-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1889): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jwcrypto-0.8-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1890): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ipalib-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1891): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ipaclient-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1892): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1893): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1894): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-11.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1895): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-11.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1896): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-ipa-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1897): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-client-4.10.1-12.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781250219.366:1898): pid=23753 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-1:3.0.7-18.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781250220.310:1899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781250220.310:1900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781250220.313:1901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r0703be30ff284a9986957e153955830e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781250220.314:1902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8bb62eeece514cccb7c1fd0d99aa0f3c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781250220.416:1903): pid=23751 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250220.416:1904): pid=23751 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250220.420:1905): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250220.420:1906): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_SESSION msg=audit(1781250276.236:1907): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=25853 suid=74 rport=41012 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250276.237:1908): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=25853 suid=74 rport=41012 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250277.629:1909): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25853 suid=74 rport=41012 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250277.630:1910): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250277.631:1911): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250280.463:1912): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23737 suid=1000 rport=42944 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781250280.468:1913): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781250280.468:1914): pid=23734 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781250307.888:1915): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=25855 suid=74 rport=46478 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250307.888:1916): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=25855 suid=74 rport=46478 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781250307.951:1917): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250307.956:1918): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781250307.985:1919): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250307.985:1920): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781250308.015:1921): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781250308.016:1922): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25855 suid=74 rport=46478 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781250308.018:1923): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781250308.018:1924): pid=25854 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781250308.018:1924): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcab2857c0 a2=4 a3=3e8 items=0 ppid=23889 pid=25854 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781250308.018:1924): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781250308.020:1925): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781250308.039:1926): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781250308.041:1927): pid=25857 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781250308.084:1928): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250308.084:1929): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250308.116:1930): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250308.116:1931): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250308.131:1932): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250308.132:1933): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250308.167:1934): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250308.167:1935): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250308.187:1936): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250308.187:1937): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250308.246:1938): pid=25903 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250308.246:1939): pid=25903 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62717171656E6979666162716A7061656F6166756764687A6673706F676D6D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250308.248:1940): pid=25903 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250308.254:1941): pid=25903 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250308.444:1942): pid=25903 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250308.444:1943): pid=25903 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250308.448:1944): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250308.448:1945): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250308.473:1946): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250308.473:1947): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250308.510:1948): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250308.510:1949): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250308.526:1950): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250308.526:1951): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250308.557:1952): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250308.557:1953): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250308.576:1954): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250308.576:1955): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250308.619:1956): pid=25948 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250308.619:1957): pid=25948 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A6B6F6569636E6661756E6567717768696761647879736D63756E65737475203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250308.620:1958): pid=25948 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250308.622:1959): pid=25948 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250308.790:1960): pid=25948 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250308.790:1961): pid=25948 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250308.794:1962): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250308.794:1963): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250308.806:1964): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250308.806:1965): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781250308.834:1966): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250308.834:1967): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250312.177:1968): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250312.177:1969): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250312.236:1970): pid=25978 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250312.236:1971): pid=25978 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74757573736A65696C636D616F6C726C63736C696D757A65706F67656A686373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250312.237:1972): pid=25978 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250312.239:1973): pid=25978 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250312.412:1974): pid=25978 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250312.412:1975): pid=25978 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250312.417:1976): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250312.417:1977): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781250314.123:1978): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781250314.123:1979): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781250314.172:1980): pid=25996 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781250314.172:1981): pid=25996 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617171656C6A74706A6C63766B6772687877796C7A6661686C78756D746C736A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781250314.172:1982): pid=25996 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781250314.174:1983): pid=25996 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250314.348:1984): pid=25996 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781250314.348:1985): pid=25996 uid=1000 auid=1000 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781250314.352:1986): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781250314.353:1987): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781250374.416:1988): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25857 suid=1000 rport=46478 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781250374.419:1989): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781250374.419:1990): pid=25854 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781250551.047:1991): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26002 suid=74 rport=45328 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250551.047:1992): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26002 suid=74 rport=45328 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250553.293:1993): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26002 suid=74 rport=45328 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250553.294:1994): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250553.294:1995): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250667.228:1996): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26005 suid=74 rport=60558 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250667.229:1997): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26005 suid=74 rport=60558 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250668.609:1998): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26005 suid=74 rport=60558 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250668.610:1999): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250668.610:2000): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250708.504:2001): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26007 suid=74 rport=57982 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250708.504:2002): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26007 suid=74 rport=57982 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250710.126:2003): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26007 suid=74 rport=57982 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250710.127:2004): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250710.128:2005): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250736.416:2006): pid=26008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26009 suid=74 rport=43370 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250736.416:2007): pid=26008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26009 suid=74 rport=43370 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250737.871:2008): pid=26008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26009 suid=74 rport=43370 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250737.872:2009): pid=26008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250737.873:2010): pid=26008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250794.460:2011): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26011 suid=74 rport=47130 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250794.461:2012): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26011 suid=74 rport=47130 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250795.848:2013): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26011 suid=74 rport=47130 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250795.849:2014): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250795.850:2015): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250865.619:2016): pid=26014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26015 suid=74 rport=42400 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250865.619:2017): pid=26014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26015 suid=74 rport=42400 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250866.980:2018): pid=26014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26015 suid=74 rport=42400 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250866.981:2019): pid=26014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250866.982:2020): pid=26014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250875.630:2021): pid=26016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26017 suid=74 rport=50686 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250875.631:2022): pid=26016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26017 suid=74 rport=50686 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250876.241:2023): pid=26016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26017 suid=74 rport=50686 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250876.243:2024): pid=26016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.64.139.147 addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250876.243:2025): pid=26016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250876.635:2026): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26019 suid=74 rport=50692 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250876.635:2027): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26019 suid=74 rport=50692 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250877.727:2028): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26019 suid=74 rport=50692 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250877.728:2029): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.64.139.147 addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250877.729:2030): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250878.075:2031): pid=26020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26021 suid=74 rport=50706 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250878.075:2032): pid=26020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26021 suid=74 rport=50706 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250878.834:2033): pid=26020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26021 suid=74 rport=50706 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250878.834:2034): pid=26020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.64.139.147 addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250878.835:2035): pid=26020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.64.139.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250921.889:2036): pid=26022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26023 suid=74 rport=41608 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250921.889:2037): pid=26022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26023 suid=74 rport=41608 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250923.308:2038): pid=26022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26023 suid=74 rport=41608 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781250923.309:2039): pid=26022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781250923.309:2040): pid=26022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781250979.137:2041): pid=26025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=26026 suid=74 rport=38248 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=199.45.155.82 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781250979.137:2042): pid=26025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=26026 suid=74 rport=38248 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=199.45.155.82 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781250994.248:2043): pid=26025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26026 suid=74 rport=38248 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=199.45.155.82 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781250994.249:2044): pid=26025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=199.45.155.82 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251013.545:2045): pid=26027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26028 suid=74 rport=55036 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251013.545:2046): pid=26027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26028 suid=74 rport=55036 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251014.428:2047): pid=26027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26028 suid=74 rport=55036 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251014.429:2048): pid=26027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251014.430:2049): pid=26027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251046.453:2050): pid=26029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26030 suid=74 rport=54512 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251046.453:2051): pid=26029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26030 suid=74 rport=54512 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251047.979:2052): pid=26029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26030 suid=74 rport=54512 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251047.980:2053): pid=26029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251047.981:2054): pid=26029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251070.303:2055): pid=26033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26034 suid=74 rport=50802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251070.303:2056): pid=26033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26034 suid=74 rport=50802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251146.911:2057): pid=26035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=26036 suid=74 rport=49875 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=122.187.229.220 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251146.912:2058): pid=26035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=26036 suid=74 rport=49875 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=122.187.229.220 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251151.069:2059): pid=26035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26036 suid=74 rport=49875 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=122.187.229.220 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251151.070:2060): pid=26035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=122.187.229.220 addr=122.187.229.220 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251151.070:2061): pid=26035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=122.187.229.220 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251159.247:2062): pid=26037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26038 suid=74 rport=39448 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251159.247:2063): pid=26037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26038 suid=74 rport=39448 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251160.132:2064): pid=26037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26038 suid=74 rport=39448 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251160.133:2065): pid=26037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251160.133:2066): pid=26037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251164.942:2067): pid=26039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26040 suid=74 rport=55106 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251164.943:2068): pid=26039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26040 suid=74 rport=55106 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251166.357:2069): pid=26039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26040 suid=74 rport=55106 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251166.358:2070): pid=26039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251166.359:2071): pid=26039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251284.926:2072): pid=26053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26054 suid=74 rport=55558 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251284.926:2073): pid=26053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26054 suid=74 rport=55558 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251287.046:2074): pid=26053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26054 suid=74 rport=55558 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251287.047:2075): pid=26053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251287.047:2076): pid=26053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251299.161:2077): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26056 suid=74 rport=52082 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251299.161:2078): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26056 suid=74 rport=52082 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251300.779:2079): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26056 suid=74 rport=52082 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251300.780:2080): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251300.781:2081): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251386.885:2082): pid=26057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26058 suid=74 rport=43614 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251386.886:2083): pid=26057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26058 suid=74 rport=43614 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251388.851:2084): pid=26057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26058 suid=74 rport=43614 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251388.852:2085): pid=26057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251388.852:2086): pid=26057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251410.993:2087): pid=26059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26060 suid=74 rport=52968 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251410.993:2088): pid=26059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26060 suid=74 rport=52968 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251412.408:2089): pid=26059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26060 suid=74 rport=52968 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251412.409:2090): pid=26059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251412.409:2091): pid=26059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251442.695:2092): pid=26061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26062 suid=74 rport=36476 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251442.695:2093): pid=26061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26062 suid=74 rport=36476 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251443.573:2094): pid=26061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26062 suid=74 rport=36476 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251443.574:2095): pid=26061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251443.574:2096): pid=26061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251448.554:2097): pid=26063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=26064 suid=74 rport=35024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=41.231.85.75 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251448.554:2098): pid=26063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=26064 suid=74 rport=35024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=41.231.85.75 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251450.587:2099): pid=26063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26064 suid=74 rport=35024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=41.231.85.75 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251450.588:2100): pid=26063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=41.231.85.75 addr=41.231.85.75 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251450.589:2101): pid=26063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=41.231.85.75 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251534.512:2102): pid=26067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26068 suid=74 rport=45054 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251534.513:2103): pid=26067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26068 suid=74 rport=45054 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251535.931:2104): pid=26067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26068 suid=74 rport=45054 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251535.931:2105): pid=26067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251535.932:2106): pid=26067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251544.433:2107): pid=26069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26070 suid=74 rport=49116 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251544.433:2108): pid=26069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26070 suid=74 rport=49116 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251546.834:2109): pid=26069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26070 suid=74 rport=49116 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251546.835:2110): pid=26069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251546.835:2111): pid=26069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251586.451:2112): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26073 suid=74 rport=49118 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251586.452:2113): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26073 suid=74 rport=49118 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251587.331:2114): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26073 suid=74 rport=49118 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251587.332:2115): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251587.333:2116): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251660.397:2117): pid=26074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26075 suid=74 rport=57868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251660.398:2118): pid=26074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26075 suid=74 rport=57868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251661.856:2119): pid=26074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26075 suid=74 rport=57868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251661.857:2120): pid=26074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251661.858:2121): pid=26074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251730.741:2122): pid=26076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26077 suid=74 rport=33524 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251730.741:2123): pid=26076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26077 suid=74 rport=33524 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251733.390:2124): pid=26076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26077 suid=74 rport=33524 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251733.391:2125): pid=26076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251733.392:2126): pid=26076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251749.755:2127): pid=26078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26079 suid=74 rport=33446 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251749.755:2128): pid=26078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26079 suid=74 rport=33446 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251793.327:2129): pid=26080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26081 suid=74 rport=59172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251793.327:2130): pid=26080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26081 suid=74 rport=59172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251794.778:2131): pid=26080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26081 suid=74 rport=59172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251794.779:2132): pid=26080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251794.780:2133): pid=26080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251855.733:2134): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26083 suid=74 rport=42618 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251855.734:2135): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26083 suid=74 rport=42618 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251858.096:2136): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26083 suid=74 rport=42618 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251858.097:2137): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251858.098:2138): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251886.726:2139): pid=26085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26086 suid=74 rport=46172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251886.726:2140): pid=26085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26086 suid=74 rport=46172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251887.628:2141): pid=26085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26086 suid=74 rport=46172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251887.629:2142): pid=26085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251887.630:2143): pid=26085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251912.454:2144): pid=26088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26089 suid=74 rport=55884 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251912.454:2145): pid=26088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26089 suid=74 rport=55884 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251913.212:2146): pid=26088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26089 suid=74 rport=55884 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251913.213:2147): pid=26088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251913.214:2148): pid=26088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251915.304:2149): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26091 suid=74 rport=38360 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251915.304:2150): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26091 suid=74 rport=38360 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251915.885:2151): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26091 suid=74 rport=38360 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251915.886:2152): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251915.886:2153): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781251920.326:2154): pid=26092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26093 suid=74 rport=34692 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781251920.326:2155): pid=26092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26093 suid=74 rport=34692 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781251922.186:2156): pid=26092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26093 suid=74 rport=34692 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781251922.187:2157): pid=26092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781251922.187:2158): pid=26092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781252009.096:2159): pid=26094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26095 suid=74 rport=33300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252009.096:2160): pid=26094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26095 suid=74 rport=33300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252013.150:2161): pid=26094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26095 suid=74 rport=33300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252013.152:2162): pid=26094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252013.154:2163): pid=26094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781252031.642:2164): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26100 suid=74 rport=51294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252031.642:2165): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26100 suid=74 rport=51294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252031.659:2166): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252031.659:2167): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781252031.676:2168): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252031.677:2169): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26100 suid=74 rport=51294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781252031.678:2170): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781252031.678:2171): pid=26097 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781252031.678:2171): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd8bde08c0 a2=4 a3=3e8 items=0 ppid=23889 pid=26097 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252031.678:2171): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781252031.679:2172): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781252031.688:2173): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1781252031.689:2174): pid=26102 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781252031.873:2175): pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26099 suid=74 rport=58810 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252031.873:2176): pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26099 suid=74 rport=58810 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781252032.105:2177): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252032.105:2178): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252032.621:2179): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252032.621:2180): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252033.109:2181): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252033.109:2182): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252033.159:2183): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252033.159:2184): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252033.177:2185): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252033.177:2186): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252033.209:2187): pid=26145 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252033.209:2188): pid=26145 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71737166656C666F747971706A7675676C656C7A65776170696F756F686E6B63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252033.209:2189): pid=26145 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252033.211:2190): pid=26145 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252034.125:2191): pid=26145 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252034.125:2192): pid=26145 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252034.128:2193): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252034.128:2194): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781252036.602:2195): pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26099 suid=74 rport=58810 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781252036.610:2196): pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781252041.676:2197): pid=26150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26151 suid=74 rport=38704 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252041.676:2198): pid=26150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26151 suid=74 rport=38704 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252043.264:2199): pid=26150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26151 suid=74 rport=38704 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252043.265:2200): pid=26150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252043.266:2201): pid=26150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252046.127:2202): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252046.127:2203): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252046.159:2204): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252046.159:2205): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252046.213:2206): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252046.213:2207): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252046.297:2208): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252046.297:2209): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252046.330:2210): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252046.331:2211): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252046.389:2212): pid=26194 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252046.389:2213): pid=26194 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79766A6A6970656D787A6E6F61656F646A68786F656378696E67616B6D636A74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252046.390:2214): pid=26194 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252046.393:2215): pid=26194 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252046.694:2216): pid=26194 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252046.695:2217): pid=26194 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252046.698:2218): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252046.698:2219): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252047.424:2220): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252047.424:2221): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252047.486:2222): pid=26214 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252047.486:2223): pid=26214 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7668637462717569696E716D6F70666E737864706D6D716769646E6B6D636578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252047.487:2224): pid=26214 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252047.490:2225): pid=26214 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1781252047.689:2226): pid=26218 uid=0 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_USER msg=audit(1781252047.692:2227): pid=26218 uid=0 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1781252047.762:2228): pid=26218 uid=0 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=1002 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="tripleo-admin"
type=USER_END msg=audit(1781252047.796:2229): pid=26214 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252047.797:2230): pid=26214 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252047.800:2231): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252047.800:2232): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252047.945:2233): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252047.946:2234): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252047.972:2235): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252047.972:2236): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252048.013:2237): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252048.013:2238): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252048.041:2239): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252048.041:2240): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252048.081:2241): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252048.081:2242): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252048.118:2243): pid=26271 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252048.118:2244): pid=26271 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6969676B6C68697A6474696B64726F6D6C6668747563716E6E687678666F6F6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252048.119:2245): pid=26271 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252048.120:2246): pid=26271 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252048.299:2247): pid=26271 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252048.299:2248): pid=26271 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252048.303:2249): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252048.303:2250): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252048.345:2251): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252048.345:2252): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252048.370:2253): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252048.370:2254): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252048.411:2255): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252048.411:2256): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252048.438:2257): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252048.438:2258): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252048.480:2259): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252048.480:2260): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252048.533:2261): pid=26314 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252048.533:2262): pid=26314 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F74626F7070767A6A717465776B6672726975787867737461696A6C666A6D69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252048.533:2263): pid=26314 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252048.556:2264): pid=26314 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252048.738:2265): pid=26314 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252048.739:2266): pid=26314 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252048.742:2267): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252048.742:2268): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252048.784:2269): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252048.784:2270): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252048.811:2271): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252048.811:2272): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252048.983:2273): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252048.983:2274): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252049.040:2275): pid=26344 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252049.041:2276): pid=26344 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63727670786E6E6478687578667A7967676B727A7668796A6D6A767969636A67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252049.041:2277): pid=26344 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252049.044:2278): pid=26344 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252049.215:2279): pid=26344 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252049.215:2280): pid=26344 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252049.219:2281): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252049.219:2282): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252049.389:2283): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252049.389:2284): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252049.446:2285): pid=26360 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252049.447:2286): pid=26360 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D666D656B656873696675776D6B70646B636E6F6E78717772756574707162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252049.447:2287): pid=26360 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252049.449:2288): pid=26360 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252049.636:2289): pid=26360 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252049.637:2290): pid=26360 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252049.641:2291): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252049.641:2292): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252049.773:2293): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252049.773:2294): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252049.840:2295): pid=26376 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252049.841:2296): pid=26376 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7567636270636C666C786A6C7765706C647A726F746979646F7266737274686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252049.841:2297): pid=26376 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252049.844:2298): pid=26376 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252050.018:2299): pid=26376 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252050.019:2300): pid=26376 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252050.022:2301): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252050.022:2302): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252050.482:2303): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252050.482:2304): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1781252050.522:2305): pid=26392 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781252050.523:2306): pid=26392 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6C716D657679667A766F7669726A7A75616E6962657A626E6D6671616B6769203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781252050.523:2307): pid=26392 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781252050.525:2308): pid=26392 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252050.671:2309): pid=26392 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781252050.671:2310): pid=26392 uid=1000 auid=1000 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781252050.675:2311): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252050.675:2312): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781252051.214:2313): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781252051.214:2314): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1781252051.399:2315): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781252051.399:2316): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_SESSION msg=audit(1781252064.569:2317): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26410 suid=74 rport=42060 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252064.569:2318): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26410 suid=74 rport=42060 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252064.624:2319): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252064.624:2320): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781252064.646:2321): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252064.646:2322): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26410 suid=74 rport=42060 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781252064.647:2323): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781252064.647:2324): pid=26409 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252064.647:2324): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe7835bd40 a2=4 a3=3ea items=0 ppid=23889 pid=26409 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252064.647:2324): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781252064.649:2325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781252064.669:2326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781252064.686:2327): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1781252064.686:2328): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1781252064.687:2329): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781252064.687:2330): pid=26413 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252064.687:2330): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc03640a30 a2=4 a3=3ea items=0 ppid=1 pid=26413 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252064.687:2330): proctitle="(systemd)"
type=USER_START msg=audit(1781252064.688:2331): pid=26413 uid=0 auid=1002 ses=17 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781252064.793:2332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781252064.799:2333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1781252064.801:2334): pid=26429 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252065.032:2335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252065.032:2336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252065.057:2337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252065.057:2338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252065.633:2339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252065.633:2340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252065.732:2341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252065.733:2342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252065.754:2343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252065.754:2344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252065.792:2345): pid=26472 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252065.793:2346): pid=26472 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71686C62617465627972617268686A746B7A6E736464716F6E767A6D6972706A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252065.793:2347): pid=26472 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252065.795:2348): pid=26472 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252066.069:2349): pid=26472 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252066.069:2350): pid=26472 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252066.072:2351): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252066.072:2352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252073.594:2353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252073.594:2354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252073.646:2355): pid=26492 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252073.647:2356): pid=26492 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F787669616F66767A676B796D70636B6D62656D616371746677757A7A6862203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252073.647:2357): pid=26492 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252073.650:2358): pid=26492 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252073.879:2359): pid=26492 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252073.879:2360): pid=26492 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252073.883:2361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252073.883:2362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252078.070:2363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252078.070:2364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252078.117:2365): pid=26508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252078.118:2366): pid=26508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737473747A75656F6D6B676E676D76696B7867726D7A79736F7A646974727265203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252078.118:2367): pid=26508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252078.120:2368): pid=26508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252078.307:2369): pid=26508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252078.308:2370): pid=26508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252078.313:2371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252078.313:2372): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252080.381:2373): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252080.381:2374): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252080.413:2375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252080.413:2376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252080.455:2377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252080.455:2378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252080.491:2379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252080.491:2380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252080.532:2381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252080.532:2382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252080.593:2383): pid=26556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252080.593:2384): pid=26556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7574746C7563686A66617A616A6875736B6E616775726B7076666D7067706962203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252080.593:2385): pid=26556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252080.596:2386): pid=26556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252080.776:2387): pid=26556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252080.777:2388): pid=26556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252080.780:2389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252080.780:2390): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252080.822:2391): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252080.822:2392): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252080.845:2393): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252080.845:2394): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252081.137:2395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252081.137:2396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252081.187:2397): pid=26586 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252081.187:2398): pid=26586 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727671747072796D746161716368646573626F767664686778736D6C71696775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252081.188:2399): pid=26586 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252081.190:2400): pid=26586 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252081.364:2401): pid=26586 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252081.364:2402): pid=26586 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252081.367:2403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252081.368:2404): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252082.096:2405): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252082.097:2406): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252082.158:2407): pid=26602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252082.159:2408): pid=26602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D666F7A777A616B66626872656362736C67756769656E6465726A6E74757774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252082.159:2409): pid=26602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252082.163:2410): pid=26602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252082.313:2411): pid=26602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252082.313:2412): pid=26602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252082.316:2413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252082.316:2414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252082.617:2415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252082.617:2416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252082.678:2417): pid=26618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252082.678:2418): pid=26618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C7772627A68776A7070636C636F766875716C6C6C657166796C627A6B6774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252082.679:2419): pid=26618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252082.681:2420): pid=26618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252082.848:2421): pid=26618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252082.849:2422): pid=26618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252082.853:2423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252082.853:2424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252083.656:2425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252083.656:2426): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252083.707:2427): pid=26635 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252083.708:2428): pid=26635 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7062666D6679777A73726F6979656E776F6B727A6B6C6669656B756E626F7478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252083.709:2429): pid=26635 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252083.712:2430): pid=26635 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252083.878:2431): pid=26635 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252083.878:2432): pid=26635 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252083.882:2433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252083.882:2434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252085.856:2435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252085.856:2436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252085.909:2437): pid=26651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252085.909:2438): pid=26651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C626B6B6579677A667A686261726C63636E75757A6D64776573767267717964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252085.910:2439): pid=26651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252085.913:2440): pid=26651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252086.104:2441): pid=26651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252086.105:2442): pid=26651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252086.108:2443): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252086.108:2444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252090.313:2445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252090.313:2446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252090.375:2447): pid=26668 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252090.375:2448): pid=26668 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7963767973686E6D67636368746961617668626969646D6B657474716E617670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252090.376:2449): pid=26668 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252090.378:2450): pid=26668 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252093.743:2451): pid=26670 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-release-17.1.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252094.506:2452): pid=26668 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252094.506:2453): pid=26668 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252094.511:2454): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252094.511:2455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252101.719:2456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252101.719:2457): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252101.771:2458): pid=26689 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252101.771:2459): pid=26689 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870616D756A716472636F6F76646A6A796A6D76736369766E7875756E797A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252101.772:2460): pid=26689 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252101.774:2461): pid=26689 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252101.933:2462): pid=26689 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252101.933:2463): pid=26689 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252101.936:2464): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252101.936:2465): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252102.156:2466): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252102.156:2467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252102.213:2468): pid=26706 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252102.213:2469): pid=26706 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A637268796F6D676A6E64616D627379757679686E686A7A69676673777661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252102.214:2470): pid=26706 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252102.217:2471): pid=26706 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252117.879:2472): prog-id=85 op=LOAD
type=BPF msg=audit(1781252117.879:2473): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.879:2474): prog-id=86 op=LOAD
type=BPF msg=audit(1781252117.879:2475): prog-id=87 op=LOAD
type=BPF msg=audit(1781252117.879:2476): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.879:2477): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.880:2478): prog-id=88 op=LOAD
type=BPF msg=audit(1781252117.880:2479): prog-id=89 op=LOAD
type=BPF msg=audit(1781252117.880:2480): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.880:2481): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.881:2482): prog-id=90 op=LOAD
type=BPF msg=audit(1781252117.881:2483): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.882:2484): prog-id=91 op=LOAD
type=BPF msg=audit(1781252117.882:2485): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.884:2486): prog-id=92 op=LOAD
type=BPF msg=audit(1781252117.884:2487): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.884:2488): prog-id=93 op=LOAD
type=BPF msg=audit(1781252117.884:2489): prog-id=94 op=LOAD
type=BPF msg=audit(1781252117.884:2490): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252117.884:2491): prog-id=0 op=UNLOAD
type=ADD_GROUP msg=audit(1781252118.951:2492): pid=26923 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=GRP_MGMT msg=audit(1781252118.955:2493): pid=26923 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=ADD_USER msg=audit(1781252119.016:2494): pid=26930 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="puppet" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781252126.211:2495): prog-id=95 op=LOAD
type=BPF msg=audit(1781252126.211:2496): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.211:2497): prog-id=96 op=LOAD
type=BPF msg=audit(1781252126.211:2498): prog-id=97 op=LOAD
type=BPF msg=audit(1781252126.211:2499): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.211:2500): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.213:2501): prog-id=98 op=LOAD
type=BPF msg=audit(1781252126.213:2502): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.214:2503): prog-id=99 op=LOAD
type=BPF msg=audit(1781252126.214:2504): prog-id=100 op=LOAD
type=BPF msg=audit(1781252126.214:2505): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.214:2506): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.215:2507): prog-id=101 op=LOAD
type=BPF msg=audit(1781252126.215:2508): prog-id=102 op=LOAD
type=BPF msg=audit(1781252126.215:2509): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.215:2510): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.216:2511): prog-id=103 op=LOAD
type=BPF msg=audit(1781252126.216:2512): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.217:2513): prog-id=104 op=LOAD
type=BPF msg=audit(1781252126.217:2514): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252126.290:2515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-monitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252126.497:2516): prog-id=105 op=LOAD
type=BPF msg=audit(1781252126.497:2517): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.497:2518): prog-id=106 op=LOAD
type=BPF msg=audit(1781252126.497:2519): prog-id=107 op=LOAD
type=BPF msg=audit(1781252126.497:2520): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.497:2521): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.500:2522): prog-id=108 op=LOAD
type=BPF msg=audit(1781252126.500:2523): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.500:2524): prog-id=109 op=LOAD
type=BPF msg=audit(1781252126.500:2525): prog-id=110 op=LOAD
type=BPF msg=audit(1781252126.500:2526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.500:2527): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.501:2528): prog-id=111 op=LOAD
type=BPF msg=audit(1781252126.502:2529): prog-id=112 op=LOAD
type=BPF msg=audit(1781252126.502:2530): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.502:2531): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.503:2532): prog-id=113 op=LOAD
type=BPF msg=audit(1781252126.503:2533): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252126.503:2534): prog-id=114 op=LOAD
type=BPF msg=audit(1781252126.503:2535): prog-id=0 op=UNLOAD
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252128.902:2536): pid=27032 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=4444 proto=6 tcontext=system_u:object_r:mysqld_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252129.879:2537): pid=27237 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=6653 proto=6 tcontext=system_u:object_r:openvswitch_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252131.321:2538): pid=27244 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=8088 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252132.188:2539): pid=27248 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=8000 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252133.605:2540): pid=27255 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6639 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252134.960:2541): pid=27261 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6641 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252136.514:2542): pid=27267 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6642 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252137.499:2543): pid=27271 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-relinker" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252138.413:2544): pid=27276 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/gnocchi/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252139.279:2545): pid=27281 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/tftpboot(/.*)?" ftype=any tcontext=system_u:object_r:tftpdir_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252140.222:2546): pid=27286 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/kolla(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252141.117:2547): pid=27291 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/tripleo-config(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252142.030:2548): pid=27296 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/vhost_sockets(/.*)?" ftype=any tcontext=system_u:object_r:virt_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252142.916:2549): pid=27301 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-rootwrap-daemon" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252143.838:2550): pid=27306 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/cache/swift(/.*)?" ftype=any tcontext=system_u:object_r:swift_var_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252144.740:2551): pid=27311 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/designate/bind9(/.*)?" ftype=any tcontext=system_u:object_r:named_zone_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252145.656:2552): pid=27316 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/httpboot(/.*)?" ftype=any tcontext=system_u:object_r:httpd_sys_content_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252146.581:2553): pid=27321 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/panko/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252147.520:2554): pid=27328 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/nova/.ssh(/.*)?" ftype=any tcontext=system_u:object_r:ssh_home_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252148.416:2555): pid=27333 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/zaqar/zaqar.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252149.359:2556): pid=27338 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-vpn-agent" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252150.274:2557): pid=27343 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/pacemaker.log.*" ftype=any tcontext=system_u:object_r:cluster_var_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252151.198:2558): pid=27351 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-reconstructor" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252152.157:2559): pid=27356 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/openstack-dashboard" ftype=any tcontext=system_u:object_r:httpd_var_lib_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252153.491:2560): pid=27362 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/aodh/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252154.428:2561): pid=27367 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/config-data(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252168.040:2562): pid=27406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27407 suid=74 rport=59560 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252168.040:2563): pid=27406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27407 suid=74 rport=59560 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252169.448:2564): pid=27406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27407 suid=74 rport=59560 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252169.449:2565): pid=27406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252169.449:2566): pid=27406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=httpd_execmem val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=httpd_can_network_connect val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=httpd_use_openstack val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=domain_can_mmap_files val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=domain_kernel_load_modules val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=nis_enabled val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=collectd_tcp_network_connect val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=glance_api_can_network val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=glance_use_fusefs val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=glance_use_execmem val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=daemons_enable_cluster_mode val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=neutron_can_network val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=haproxy_connect_any val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=rsync_client val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=rsync_full_access val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=swift_can_network val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=virt_use_execmem val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252171.743:2567): bool=virt_use_fusefs val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252171.743:2567): arch=c000003e syscall=1 success=yes exit=2 a0=34 a1=7ffc012df1de a2=2 a3=0 items=0 ppid=27028 pid=27373 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="semanage" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252171.743:2567): proctitle=2F7573722F62696E2F707974686F6E33002D457349002F7573722F7362696E2F73656D616E61676500696D706F7274002D4E
type=CRYPTO_SESSION msg=audit(1781252172.039:2568): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27410 suid=74 rport=43218 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252172.039:2569): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27410 suid=74 rport=43218 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252173.169:2570): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27410 suid=74 rport=43218 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252173.170:2571): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252173.171:2572): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=MAC_POLICY_LOAD msg=audit(1781252173.604:2573): auid=1002 ses=16 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252173.604:2573): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f4996400000 a2=36aa51 a3=0 items=0 ppid=27028 pid=27479 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252173.604:2573): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1781252173.985:2574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r9bac3ccfb23c4ec18490dc758b8471b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252174.239:2575): prog-id=115 op=LOAD
type=BPF msg=audit(1781252174.239:2576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.239:2577): prog-id=116 op=LOAD
type=BPF msg=audit(1781252174.239:2578): prog-id=117 op=LOAD
type=BPF msg=audit(1781252174.239:2579): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.240:2580): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.243:2581): prog-id=118 op=LOAD
type=BPF msg=audit(1781252174.243:2582): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.243:2583): prog-id=119 op=LOAD
type=BPF msg=audit(1781252174.243:2584): prog-id=120 op=LOAD
type=BPF msg=audit(1781252174.243:2585): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.243:2586): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.244:2587): prog-id=121 op=LOAD
type=BPF msg=audit(1781252174.244:2588): prog-id=122 op=LOAD
type=BPF msg=audit(1781252174.244:2589): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.244:2590): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.246:2591): prog-id=123 op=LOAD
type=BPF msg=audit(1781252174.246:2592): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252174.247:2593): prog-id=124 op=LOAD
type=BPF msg=audit(1781252174.247:2594): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252174.298:2595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd1fb0493509d41cdaa636462b74e5060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2596): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-libs-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2597): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bigdecimal-3.0.0-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2598): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-default-gems-3.0.4-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2599): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bundler-2.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2600): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-io-console-0.5.7-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2601): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-json-2.5.1-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2602): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-psych-3.3.2-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2603): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rdoc-6.3.3-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2604): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygems-3.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2605): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2606): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-regex-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2607): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-system-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2608): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-filesystem-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2609): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-thread-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2610): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libaio-0.3.111-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2611): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-chrono-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2612): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-locale-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2613): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2614): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2615): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2616): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-psutil-5.8.0-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2617): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-simplejson-3.17.5-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2618): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-os-service-types-1.7.0-17.1.20230620201222.0b2f473.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2619): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneauth1-4.4.0-17.1.20240812145234.112bcae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2620): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="dib-utils-0.0.11-17.1.20230620173328.51661c3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2621): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-refresh-config-13.1.1-17.1.20231020000854.812905b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2622): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jeepney-0.6.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2623): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-secretstorage-3.3.1-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2624): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keyring-21.8.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2625): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pystache-0.5.4-15.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2626): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-apply-config-13.1.1-17.1.20231020001757.3c7f9b9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2627): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2628): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-libs-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2629): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-persistent-data-0.9.0-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2630): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-fast_gettext-1.2.0-9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.337:2631): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-hocon-1.3.1-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2632): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="hiera-3.6.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2633): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-concurrent-ruby-1.1.5-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2634): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-deep_merge-1.2.1-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2635): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-multi_json-1.15.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2636): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-ruby-shadow-2.5.0-15.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2637): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-semantic_puppet-1.0.4-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2638): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rexml-3.2.5-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2639): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-augeas-0.5.0-29.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2640): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libselinux-ruby-3.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2641): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="glibc-langpack-en-2.34-60.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2642): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libxslt-1.1.34-11.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2643): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-lxml-4.6.5-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2644): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-conf-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2645): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-libs-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2646): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-mako-1.1.4-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2647): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dogpile-cache-1.1.5-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2648): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2649): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wcwidth-0.2.5-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2650): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-appdirs-1.4.4-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2651): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lm_sensors-libs-3.6.0-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2652): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-atomic-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2653): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-log-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2654): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-program-options-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2655): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-services-1.8.8-6.el9_1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2656): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-nowide-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2657): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="leatherman-1.12.6-5.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2658): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cpp-hocon-0.3.0-7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2659): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yaml-cpp-0.6.3-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2660): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2661): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2662): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-puppet-resource_api-1.8.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2663): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-headless-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2664): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2665): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-stdlib-6.3.1-17.1.20230621000857.7c1ae25.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2666): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-inifile-4.2.1-17.1.20250804150825.df46d2a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2667): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-concat-6.2.1-17.1.20250725131333.dfeabb9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2668): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-apache-6.5.2-17.1.20250811150836.e4a1532.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2669): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-xinetd-3.3.1-17.1.20230620185435.8d460c4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2670): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-firewall-3.4.1-17.1.20250804151611.94f707c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2671): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-memcached-6.0.0-17.1.20230620184630.4c70dbd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2672): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-sysctl-0.0.13-17.1.20250725113328.847ec1c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2673): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsync-1.1.4-17.1.20250804151510.ea6397e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2674): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-corosync-8.0.1-17.1.20230621104908.6a9da9a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2675): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-mysql-10.6.1-17.1.20230621022141.937d044.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2676): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-systemd-2.12.1-17.1.20230620191611.8f68b0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2677): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-redis-6.1.1-17.1.20230620191704.547105e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2678): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstack_extras-18.5.1-17.1.20230621042409.504e1a0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2679): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-horizon-18.6.1-17.1.20251008130751.8074e69.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2680): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-pacemaker-1.5.1-17.1.20250214161010.f10ce89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2681): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-auditd-2.2.1-17.1.20230620192453.189b22b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2682): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-collectd-13.0.1-17.1.20230620193147.ad138a7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2683): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-dns-8.2.1-17.1.20230621002045.70f5b28.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2684): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsyslog-4.0.1-17.1.20230620200132.2548a0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2685): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ssh-6.2.1-17.1.20230620190251.6e0f430.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2686): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-haproxy-4.2.2-17.1.20250725114653.a797b8c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2687): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keepalived-0.0.2-17.1.20250725114922.bbca37a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2688): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-fdio-18.2-1.20220727113954.6fd1c8e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2689): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-archive-4.6.1-17.1.20230620181607.bc7e4ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2690): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rabbitmq-11.0.1-17.1.20230620182519.63fee2c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2691): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstacklib-18.5.2-17.1.20230621052822.64d8ac6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2692): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-oslo-18.5.1-17.1.20230621052358.fe2a147.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2693): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keystone-18.6.1-17.1.20251008090800.cb0adcb.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2694): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-glance-18.6.1-17.1.20250220151014.81b081d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2695): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-cinder-18.5.2-17.1.20230621054224.6aa60e7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2696): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nova-18.6.1-17.1.20230621090443.a21eae4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.338:2697): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-octavia-18.5.1-17.1.20230621062420.842492c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2698): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-manila-18.5.2-17.1.20231102190827.a72a7d5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2699): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ceilometer-18.4.3-17.1.20230927010818.3838907.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2700): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-designate-18.6.1-17.1.20230621061456.f4c0b89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2701): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-gnocchi-18.4.3-17.1.20230621061020.7584b94.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2702): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-heat-18.4.1-17.1.20230621111632.3b41bb0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2703): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-placement-5.4.3-17.1.20230621061610.e7557a5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2704): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-swift-18.6.1-17.1.20230621052139.f105ffc.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2705): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-barbican-18.4.2-17.1.20250625204151.af6c77b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2706): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-aodh-18.4.2-17.1.20230620151218.3e47b5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2707): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-certmonger-2.7.1-17.1.20230620184730.3e2e660.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2708): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-etcd-1.12.3-17.1.20230620193226.e143c2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2709): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nssdb-1.0.2-17.1.20230620185645.2ed2a2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2710): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-qdr-7.4.1-17.1.20230620195605.8a575de.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2711): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ovn-18.6.1-17.1.20240925094907.7805f7e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2712): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-git-0.5.0-17.1.20250725114148.4e4498e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2713): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ipaclient-2.5.2-17.1.20250725102608.b086731.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2714): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-snmp-3.9.1-17.1.20250725115759.5d73485.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2715): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-kmod-2.5.0-17.1.20230620190646.52e31e3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2716): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vswitch-14.4.3-17.1.20230621043558.51e82ca.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2717): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-neutron-18.6.1-17.1.20251217160845.c9d467f.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2718): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-module-data-0.5.1-17.1.20250725115430.28dafce.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2719): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-remote-10.0.0-17.1.20250725114017.7420908.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2720): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vcsrepo-3.1.1-17.1.20250725113408.a36ee18.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2721): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ironic-18.7.1-17.1.20240305210817.edf93f9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2722): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rsa-4.6-3.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2723): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-boto-2.45.0-8.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2724): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="heat-cfntools-1.4.2-6.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2725): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-munch-2.5.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2726): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-msgpack-1.0.2-4.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2727): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-serialization-4.1.1-17.1.20230621011445.bbe5d5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2728): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneclient-1:4.3.0-17.1.20230621025111.d5cb761.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2729): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-swiftclient-3.11.1-17.1.20230620204150.06b36ae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2730): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-colorama-0.4.4-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2731): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-requestsexceptions-1.4.0-17.1.20230620164652.d7ac0ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2732): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-context-3.2.1-17.1.20230620204857.b124eb7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2733): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-log-lang-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2734): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-log-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2735): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyperclip-1.8.0-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2736): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cmd2-1.4.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2737): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cliff-3.7.0-17.1.20230620172206.117a100.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2738): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jmespath-0.10.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2739): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-openstacksdk-0.55.1-17.1.20250516211008.f09ed4a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2740): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-osc-lib-2.3.1-17.1.20230620203400.2b7a679.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2741): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heatclient-2.3.1-17.1.20230621012952.d16c245.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2742): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zaqarclient-2.4.0-17.1.20230620214253.e388947.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2743): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-collect-config-13.1.1-17.1.20231020001748.76173d8.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2744): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2745): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-ansible-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2746): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-apply-config-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2747): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-docker-cmd-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2748): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-hiera-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2749): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-json-file-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2750): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-puppet-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2751): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-heat-agents-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2752): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-tripleo-14.2.3-17.1.20250320101351.40278e1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2753): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sysstat-12.5.4-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2754): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2755): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2756): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tmpwatch-2.11-20.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2757): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="driverctl-0.111-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252174.339:2758): pid=26708 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-selinux-0.8.37-17.1.20231107080825.05dd1b2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252174.435:2759): pid=27640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27663 suid=74 rport=38022 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252174.435:2760): pid=27640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27663 suid=74 rport=38022 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781252174.742:2761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252174.742:2762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252174.745:2763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r9bac3ccfb23c4ec18490dc758b8471b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252174.745:2764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd1fb0493509d41cdaa636462b74e5060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252175.569:2765): pid=26706 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252175.569:2766): pid=26706 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252175.573:2767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252175.573:2768): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252177.300:2769): pid=27640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27663 suid=74 rport=38022 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252177.300:2770): pid=27640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252177.301:2771): pid=27640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252179.398:2772): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252179.398:2773): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252179.464:2774): pid=28414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252179.464:2775): pid=28414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E706179757671786F7A6A687A66776D73786C737A79647865676B61616D61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252179.466:2776): pid=28414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252179.472:2777): pid=28414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252180.321:2778): pid=28414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252180.321:2779): pid=28414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252180.323:2780): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252180.323:2781): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252180.788:2782): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252180.788:2783): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252180.835:2784): pid=28553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252180.835:2785): pid=28553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65676C6767716E736876696A697778786F6776656C6A7277646F7A7875746C6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252180.835:2786): pid=28553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252180.837:2787): pid=28553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252181.305:2788): prog-id=125 op=LOAD
type=BPF msg=audit(1781252181.306:2789): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.306:2790): prog-id=126 op=LOAD
type=BPF msg=audit(1781252181.306:2791): prog-id=127 op=LOAD
type=BPF msg=audit(1781252181.306:2792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.306:2793): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.308:2794): prog-id=128 op=LOAD
type=BPF msg=audit(1781252181.308:2795): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.308:2796): prog-id=129 op=LOAD
type=BPF msg=audit(1781252181.308:2797): prog-id=130 op=LOAD
type=BPF msg=audit(1781252181.308:2798): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.308:2799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.310:2800): prog-id=131 op=LOAD
type=BPF msg=audit(1781252181.310:2801): prog-id=132 op=LOAD
type=BPF msg=audit(1781252181.310:2802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.310:2803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.311:2804): prog-id=133 op=LOAD
type=BPF msg=audit(1781252181.311:2805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252181.312:2806): prog-id=134 op=LOAD
type=BPF msg=audit(1781252181.312:2807): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781252181.348:2808): pid=28553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252181.348:2809): pid=28553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252181.351:2810): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252181.351:2811): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252181.654:2812): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252181.654:2813): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252181.700:2814): pid=28608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252181.700:2815): pid=28608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786677636775746C6F6A61646F6F7676616D68736F73676D6170666B6F6F7368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252181.701:2816): pid=28608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252181.704:2817): pid=28608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252181.880:2818): pid=28608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252181.880:2819): pid=28608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252181.884:2820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252181.884:2821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252182.090:2822): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252182.090:2823): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252182.134:2824): pid=28624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252182.134:2825): pid=28624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6471626A7775756278747774707A6A7173746E64636175756176616F72716677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252182.135:2826): pid=28624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252182.136:2827): pid=28624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252182.286:2828): pid=28624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252182.287:2829): pid=28624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252182.291:2830): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252182.291:2831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252182.687:2832): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252182.687:2833): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252182.738:2834): pid=28641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252182.738:2835): pid=28641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65716F6F6169686762727166647770797570686C67757963786F6B627665726C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252182.739:2836): pid=28641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252182.740:2837): pid=28641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252183.019:2838): pid=28641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252183.019:2839): pid=28641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252183.024:2840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252183.024:2841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252184.207:2842): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252184.207:2843): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252184.262:2844): pid=28659 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252184.263:2845): pid=28659 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6572677677676265786270646C65746B6771686A687863777672796D75677668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252184.263:2846): pid=28659 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252184.266:2847): pid=28659 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252184.466:2848): pid=28659 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252184.466:2849): pid=28659 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252184.470:2850): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252184.470:2851): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252184.717:2852): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252184.717:2853): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252184.781:2854): pid=28677 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252184.782:2855): pid=28677 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C6D68726B6A747A726A6963736D74686A6E7A6A646B756573747069646564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252184.782:2856): pid=28677 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252184.785:2857): pid=28677 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252184.988:2858): pid=28677 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252184.988:2859): pid=28677 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252184.991:2860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252184.991:2861): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252185.202:2862): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252185.202:2863): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252185.248:2864): pid=28695 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252185.249:2865): pid=28695 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677575716E636F64646B68656F6E6661676A72656F7070687566666D6B647379203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252185.249:2866): pid=28695 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252185.251:2867): pid=28695 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252185.600:2868): pid=28695 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252185.600:2869): pid=28695 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252185.604:2870): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252185.604:2871): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252185.795:2872): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252185.795:2873): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252185.844:2874): pid=28715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252185.844:2875): pid=28715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A616376656571786E6E69716669617A6E6D687364706C6A7969617061716D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252185.844:2876): pid=28715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252185.848:2877): pid=28715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252186.012:2878): pid=28715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252186.012:2879): pid=28715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252186.016:2880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252186.016:2881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252186.317:2882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252186.317:2883): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252186.376:2884): pid=28732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252186.377:2885): pid=28732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79736D73656F766870706478787665637A62656A636167787867757877666777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252186.377:2886): pid=28732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252186.380:2887): pid=28732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252186.539:2888): pid=28732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252186.540:2889): pid=28732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252186.543:2890): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252186.543:2891): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252186.746:2892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252186.746:2893): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252186.807:2894): pid=28750 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252186.808:2895): pid=28750 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79647177797070726B627776686470676B616367656B717A656B6C726B62796A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252186.808:2896): pid=28750 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252186.811:2897): pid=28750 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252186.982:2898): pid=28750 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252186.983:2899): pid=28750 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252186.986:2900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252186.986:2901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252187.160:2902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252187.160:2903): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252187.201:2904): pid=28767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252187.202:2905): pid=28767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C737577767A63666F7165776E6E74717374796D7664617A676C666C73626B75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252187.202:2906): pid=28767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252187.204:2907): pid=28767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252187.372:2908): pid=28767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252187.372:2909): pid=28767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252187.375:2910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252187.375:2911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252187.843:2912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252187.843:2913): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252187.907:2914): pid=28783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252187.907:2915): pid=28783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7771747671746F666B6A736566776B786E716D616A637863646578736A6C6966203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252187.908:2916): pid=28783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252187.911:2917): pid=28783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252187.921:2918): pid=28753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=28786 suid=74 rport=33114 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=121.189.198.60 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252187.922:2919): pid=28753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=28786 suid=74 rport=33114 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=121.189.198.60 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252188.081:2920): pid=28783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252188.081:2921): pid=28783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252188.085:2922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252188.085:2923): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252188.275:2924): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252188.275:2925): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252188.332:2926): pid=28800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252188.332:2927): pid=28800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73787A797A6172636B6D6C666874776473706A617A706E66796C737768706A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252188.333:2928): pid=28800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252188.336:2929): pid=28800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252188.487:2930): pid=28800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252188.487:2931): pid=28800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252188.491:2932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252188.491:2933): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252189.141:2934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252189.141:2935): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252189.192:2936): pid=28816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252189.193:2937): pid=28816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78676469727471706B6F636C72786B716679716A716B696468736961696A727A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252189.193:2938): pid=28816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252189.195:2939): pid=28816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252189.362:2940): pid=28816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252189.362:2941): pid=28816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252189.366:2942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252189.366:2943): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252189.565:2944): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252189.565:2945): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252189.603:2946): pid=28832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252189.603:2947): pid=28832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76796662746F736D71716C786D6B6D766672666E6C6E736E71797566656C686F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252189.604:2948): pid=28832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252189.605:2949): pid=28832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252189.775:2950): pid=28832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252189.775:2951): pid=28832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252189.778:2952): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252189.778:2953): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252189.963:2954): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252189.963:2955): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252190.021:2956): pid=28850 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252190.021:2957): pid=28850 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C76646278796F617479726766726D6869776A657663717772796E73676775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252190.022:2958): pid=28850 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252190.024:2959): pid=28850 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252190.205:2960): pid=28850 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252190.205:2961): pid=28850 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252190.208:2962): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252190.208:2963): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252191.201:2964): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252191.201:2965): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252191.260:2966): pid=28866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252191.261:2967): pid=28866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D6E64686B687770616966657174766B74676B6F77766A7273786E656C6E75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252191.261:2968): pid=28866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252191.264:2969): pid=28866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252191.460:2970): pid=28866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252191.461:2971): pid=28866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252191.465:2972): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252191.465:2973): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252191.564:2974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252191.564:2975): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252191.623:2976): pid=28882 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252191.623:2977): pid=28882 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6271696167646A6B6E70636F717A626E796A64716D6C7865736B706570626579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252191.624:2978): pid=28882 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252191.627:2979): pid=28882 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252191.797:2980): pid=28753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28786 suid=74 rport=33114 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=121.189.198.60 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252191.798:2981): pid=28753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=121.189.198.60 addr=121.189.198.60 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252191.799:2982): pid=28753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.189.198.60 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252191.815:2983): pid=28882 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252191.816:2984): pid=28882 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252191.820:2985): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252191.820:2986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252191.899:2987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252191.899:2988): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252191.947:2989): pid=28900 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252191.947:2990): pid=28900 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656671716271677269796B62756F6D72646A67726A727661676672617A6F6566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252191.947:2991): pid=28900 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252191.949:2992): pid=28900 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252192.106:2993): pid=28900 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252192.106:2994): pid=28900 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252192.109:2995): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252192.109:2996): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252192.329:2997): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252192.329:2998): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252192.386:2999): pid=28919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252192.386:3000): pid=28919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69646C727165676C726B61747A777969706C756378726F676F7666656F696D73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252192.387:3001): pid=28919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252192.389:3002): pid=28919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252192.563:3003): pid=28919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252192.563:3004): pid=28919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252192.566:3005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252192.567:3006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252192.693:3007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252192.693:3008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252192.749:3009): pid=28935 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252192.749:3010): pid=28935 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C7369686363766275786C79696674696376647A716D696465646363656B66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252192.750:3011): pid=28935 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252192.752:3012): pid=28935 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252192.930:3013): pid=28935 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252192.931:3014): pid=28935 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252192.934:3015): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252192.934:3016): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252193.045:3017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252193.045:3018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252193.076:3019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252193.076:3020): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252193.117:3021): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252193.117:3022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252193.154:3023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252193.154:3024): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252193.196:3025): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252193.196:3026): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252193.259:3027): pid=28983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252193.259:3028): pid=28983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646B797473686B66626D6E74616A676A757663747465777862656C6B65736366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252193.259:3029): pid=28983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252193.262:3030): pid=28983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252193.426:3031): pid=28983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252193.426:3032): pid=28983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252193.429:3033): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252193.429:3034): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252193.472:3035): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252193.472:3036): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252193.505:3037): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252193.505:3038): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252193.547:3039): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252193.547:3040): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252193.571:3041): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252193.572:3042): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252193.618:3043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252193.618:3044): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252193.660:3045): pid=29026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252193.660:3046): pid=29026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6572656D766971706D616766676E7573797870617862756C7562736969766C73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252193.660:3047): pid=29026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252193.662:3048): pid=29026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252193.834:3049): pid=29026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252193.835:3050): pid=29026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252193.838:3051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252193.839:3052): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252193.880:3053): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252193.880:3054): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252193.910:3055): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252193.910:3056): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252195.315:3057): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252195.315:3058): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252195.356:3059): pid=29056 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252195.356:3060): pid=29056 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74737277667A6A686776667577616879766C706B656E6B6B69666772746B6170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252195.356:3061): pid=29056 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252195.358:3062): pid=29056 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252195.540:3063): pid=29056 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252195.540:3064): pid=29056 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252195.561:3065): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252195.561:3066): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252196.032:3067): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252196.032:3068): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252196.078:3069): pid=29073 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252196.078:3070): pid=29073 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D656A7271626F696D627A726E6C61716F68716D6E6E6B6D7966746667687878203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252196.079:3071): pid=29073 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252196.081:3072): pid=29073 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781252200.827:3073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra1161b884c5040688e9008784e3cf501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252201.051:3074): prog-id=135 op=LOAD
type=BPF msg=audit(1781252201.051:3075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.051:3076): prog-id=136 op=LOAD
type=BPF msg=audit(1781252201.052:3077): prog-id=137 op=LOAD
type=BPF msg=audit(1781252201.052:3078): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.052:3079): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.056:3080): prog-id=138 op=LOAD
type=BPF msg=audit(1781252201.056:3081): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.056:3082): prog-id=139 op=LOAD
type=BPF msg=audit(1781252201.056:3083): prog-id=140 op=LOAD
type=BPF msg=audit(1781252201.056:3084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.056:3085): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.058:3086): prog-id=141 op=LOAD
type=BPF msg=audit(1781252201.058:3087): prog-id=142 op=LOAD
type=BPF msg=audit(1781252201.058:3088): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.058:3089): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.060:3090): prog-id=143 op=LOAD
type=BPF msg=audit(1781252201.060:3091): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252201.061:3092): prog-id=144 op=LOAD
type=BPF msg=audit(1781252201.061:3093): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781252201.126:3094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252201.212:3095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252201.212:3096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252201.214:3097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra1161b884c5040688e9008784e3cf501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252202.461:3098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252202.497:3099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r32f24f6c0bbc48608b1f609390cc16e5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1781252202.501:3100): pid=29075 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="tuned-2.27.0-1.2.20260514git0eb28ac3.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252202.501:3101): pid=29075 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tuned-profiles-cpu-partitioning-2.27.0-1.2.20260514git0eb28ac3.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781252202.750:3102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252202.750:3103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252202.752:3104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r32f24f6c0bbc48608b1f609390cc16e5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252203.463:3105): pid=29073 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252203.463:3106): pid=29073 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252203.467:3107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252203.467:3108): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252203.581:3109): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252203.581:3110): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252203.641:3111): pid=29520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252203.641:3112): pid=29520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75776B71766B62636F707276707A637A737366706F6E747463666F796B6E6675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252203.643:3113): pid=29520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252203.648:3114): pid=29520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252204.000:3115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252205.172:3116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252205.172:3117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252205.313:3118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252205.331:3119): pid=29520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252205.331:3120): pid=29520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252205.337:3121): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252205.337:3122): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252205.426:3123): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252205.426:3124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252205.487:3125): pid=29721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252205.487:3126): pid=29721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E716668746A6C727967726F637866627174657764717572746175796677767A203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252205.488:3127): pid=29721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252205.491:3128): pid=29721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252205.631:3129): pid=29721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252205.631:3130): pid=29721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252205.635:3131): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252205.635:3132): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252206.120:3133): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252206.120:3134): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252206.173:3135): pid=29738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252206.174:3136): pid=29738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C65766F66776371636373766C6361726C6E6768646F6E6D71647A65636371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252206.174:3137): pid=29738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252206.177:3138): pid=29738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252206.345:3139): pid=29738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252206.345:3140): pid=29738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252206.349:3141): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252206.349:3142): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252206.455:3143): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252206.455:3144): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252206.506:3145): pid=29754 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252206.507:3146): pid=29754 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776264666A797A6D686B747663796E6E6C796878777861716F6F70787476746E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252206.507:3147): pid=29754 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252206.510:3148): pid=29754 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252206.687:3149): pid=29754 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252206.688:3150): pid=29754 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252206.692:3151): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252206.692:3152): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252207.032:3153): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252207.032:3154): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252207.091:3155): pid=29770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252207.092:3156): pid=29770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6965726663736B617561736764776B746D777563726A67766B62666371636972203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252207.093:3157): pid=29770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252207.096:3158): pid=29770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252208.440:3159): pid=29770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252208.441:3160): pid=29770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252208.443:3161): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252208.443:3162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252208.840:3163): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252208.840:3164): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252208.887:3165): pid=29790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252208.887:3166): pid=29790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6378777461776968786E766C706B6B6A697171626771716F7A68667879627765203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252208.888:3167): pid=29790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252208.891:3168): pid=29790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252209.073:3169): pid=29790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252209.073:3170): pid=29790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252209.076:3171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252209.076:3172): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252209.206:3173): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252209.206:3174): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252209.267:3175): pid=29807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252209.267:3176): pid=29807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766E64636374666A73696D706E63646F786E6E616B77637A6D68797577736F6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252209.268:3177): pid=29807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252209.270:3178): pid=29807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252209.448:3179): pid=29807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252209.449:3180): pid=29807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252209.454:3181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252209.454:3182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252210.457:3183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252210.457:3184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252210.512:3185): pid=29823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252210.512:3186): pid=29823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6164687779756B776977797A6E6569666A6D617873616474716A6F62676C7761203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252210.513:3187): pid=29823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252210.515:3188): pid=29823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252210.696:3189): pid=29823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252210.697:3190): pid=29823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252210.700:3191): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252210.700:3192): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252226.713:3193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252226.713:3194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252226.764:3195): pid=29839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252226.764:3196): pid=29839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C62756171756269777A6C667276717A6E646F6D66637265716F616C6D736E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252226.766:3197): pid=29839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252226.769:3198): pid=29839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252226.941:3199): pid=29839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252226.941:3200): pid=29839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252226.945:3201): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252226.945:3202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252227.062:3203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252227.062:3204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252227.093:3205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252227.093:3206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252227.134:3207): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252227.134:3208): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252227.165:3209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252227.165:3210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252227.206:3211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252227.206:3212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252227.251:3213): pid=29887 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252227.252:3214): pid=29887 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62736376757A687865686E747374777A6D6A677076777369757878657368646F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252227.252:3215): pid=29887 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252227.254:3216): pid=29887 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252227.402:3217): pid=29887 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252227.403:3218): pid=29887 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252227.409:3219): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252227.409:3220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252227.450:3221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252227.450:3222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252227.487:3223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252227.487:3224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252227.529:3225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252227.529:3226): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252227.563:3227): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252227.563:3228): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252227.605:3229): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252227.605:3230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252227.661:3231): pid=29932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252227.662:3232): pid=29932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637571656E70766A73776566617872767A76756E78716F707967646B65796461203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252227.663:3233): pid=29932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252227.666:3234): pid=29932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252227.835:3235): pid=29932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252227.835:3236): pid=29932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252227.838:3237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252227.839:3238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252227.880:3239): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252227.880:3240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252227.909:3241): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252227.909:3242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252228.097:3243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252228.097:3244): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252228.149:3245): pid=29962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252228.150:3246): pid=29962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7762717163706A74717274666C79616263746E747A657063737761676B736C78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252228.151:3247): pid=29962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252228.154:3248): pid=29962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252228.352:3249): pid=29962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252228.353:3250): pid=29962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252228.357:3251): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252228.357:3252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252228.835:3253): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252228.835:3254): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252228.861:3255): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252228.861:3256): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252228.901:3257): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252228.902:3258): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252228.929:3259): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252228.929:3260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252228.970:3261): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252228.971:3262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252229.021:3263): pid=30010 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252229.021:3264): pid=30010 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7274757A657A67617764726A6D67726F79757A78646C7870646B6C646C61666A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252229.023:3265): pid=30010 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252229.027:3266): pid=30010 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252229.209:3267): pid=30010 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252229.210:3268): pid=30010 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252229.213:3269): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252229.214:3270): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252229.245:3271): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252229.245:3272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252229.281:3273): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252229.281:3274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252229.322:3275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252229.322:3276): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252229.358:3277): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252229.358:3278): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252229.399:3279): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252229.399:3280): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252229.463:3281): pid=30053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252229.463:3282): pid=30053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64766A7663796D696D656A696D7A6F63696A646874706466657776736868656A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252229.464:3283): pid=30053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252229.466:3284): pid=30053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252229.644:3285): pid=30053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252229.644:3286): pid=30053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252229.647:3287): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252229.647:3288): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252229.669:3289): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252229.669:3290): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252229.690:3291): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252229.691:3292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252229.855:3293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252229.856:3294): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252229.885:3295): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252229.886:3296): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252229.927:3297): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252229.927:3298): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252229.965:3299): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252229.965:3300): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252230.044:3301): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252230.045:3302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252230.107:3303): pid=30115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252230.107:3304): pid=30115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C6B6275736663787867666F716C7671796366697771636B776A6F666F6968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252230.107:3305): pid=30115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252230.110:3306): pid=30115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252230.305:3307): pid=30115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252230.305:3308): pid=30115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252230.309:3309): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252230.309:3310): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252230.375:3311): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252230.375:3312): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252230.431:3313): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252230.431:3314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252230.478:3315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252230.478:3316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252230.511:3317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252230.511:3318): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252230.553:3319): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252230.553:3320): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252230.598:3321): pid=30158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252230.598:3322): pid=30158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696367706973766D6769776B76616D776D6A63627663617365656F726A75776F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252230.598:3323): pid=30158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252230.600:3324): pid=30158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252230.745:3325): pid=30158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252230.745:3326): pid=30158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252230.748:3327): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252230.749:3328): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252230.789:3329): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252230.789:3330): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252230.816:3331): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252230.816:3332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252230.858:3333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252230.858:3334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252230.885:3335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252230.885:3336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252230.927:3337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252230.927:3338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252230.954:3339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252230.954:3340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252231.077:3341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252231.077:3342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252231.138:3343): pid=30220 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252231.139:3344): pid=30220 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77656C6C6E75766A6B776872716A716E71686D64696265687669746E64637766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252231.139:3345): pid=30220 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252231.142:3346): pid=30220 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252231.318:3347): pid=30220 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252231.319:3348): pid=30220 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252231.323:3349): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252231.323:3350): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252231.365:3351): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252231.365:3352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252231.401:3353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252231.401:3354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252231.443:3355): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252231.443:3356): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252231.474:3357): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252231.474:3358): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252231.516:3359): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252231.516:3360): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252231.577:3361): pid=30263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252231.577:3362): pid=30263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6877627869747264616C6574727A6D64647876677A79666A68666F766C6F7065203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252231.578:3363): pid=30263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252231.580:3364): pid=30263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252231.729:3365): pid=30263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252231.730:3366): pid=30263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252231.733:3367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252231.733:3368): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252231.775:3369): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252231.775:3370): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252231.806:3371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252231.806:3372): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252231.863:3373): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252231.863:3374): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252231.895:3375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252231.895:3376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252231.936:3377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252231.937:3378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252231.971:3379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252231.971:3380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252232.247:3381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252232.248:3382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252232.303:3383): pid=30325 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252232.304:3384): pid=30325 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6168696769626F777369756A79696A70766973696C76657969776B6D78617164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252232.304:3385): pid=30325 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252232.307:3386): pid=30325 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252232.455:3387): pid=30325 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252232.456:3388): pid=30325 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252232.460:3389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252232.460:3390): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252232.502:3391): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252232.502:3392): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252232.538:3393): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252232.538:3394): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252232.579:3395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252232.579:3396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252232.608:3397): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252232.608:3398): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252232.649:3399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252232.650:3400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252232.710:3401): pid=30368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252232.711:3402): pid=30368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64726D61696672727367706B6568646D696D727A63716E796A6D717065746275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252232.712:3403): pid=30368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252232.715:3404): pid=30368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252232.903:3405): pid=30368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252232.903:3406): pid=30368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252232.907:3407): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252232.907:3408): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252232.949:3409): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252232.949:3410): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252232.977:3411): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252232.978:3412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252233.048:3413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252233.048:3414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252233.078:3415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252233.078:3416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252233.120:3417): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252233.120:3418): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252233.152:3419): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252233.152:3420): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252233.196:3421): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252233.196:3422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252233.253:3423): pid=30431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252233.253:3424): pid=30431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75706E6F6E66716372756A73616D626C6C7368776C64757A6172766476616363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252233.254:3425): pid=30431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252233.255:3426): pid=30431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252233.420:3427): pid=30431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252233.420:3428): pid=30431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252233.423:3429): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252233.424:3430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252233.464:3431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252233.465:3432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252233.508:3433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252233.508:3434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252233.556:3435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252233.556:3436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252233.592:3437): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252233.592:3438): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252233.634:3439): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252233.634:3440): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252233.697:3441): pid=30474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252233.697:3442): pid=30474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707865616262676F7A6E79787A6E7A64646369726969766F777065686A797464203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252233.698:3443): pid=30474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252233.701:3444): pid=30474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252233.906:3445): pid=30474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252233.906:3446): pid=30474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252233.910:3447): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252233.911:3448): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252233.957:3449): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252233.957:3450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252233.991:3451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252233.991:3452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252234.060:3453): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252234.061:3454): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252234.091:3455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252234.091:3456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252234.132:3457): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252234.132:3458): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252234.174:3459): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252234.175:3460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252234.264:3461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252234.264:3462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252234.321:3463): pid=30536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252234.321:3464): pid=30536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6971666D796564737163636D776573646F6E6B77636E6C636E6E676A76677973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252234.322:3465): pid=30536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252234.324:3466): pid=30536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252234.487:3467): pid=30536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252234.488:3468): pid=30536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252234.491:3469): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252234.491:3470): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252234.533:3471): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252234.533:3472): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252234.571:3473): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252234.571:3474): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252234.613:3475): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252234.613:3476): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252234.643:3477): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252234.643:3478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252234.685:3479): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252234.685:3480): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252234.747:3481): pid=30579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252234.748:3482): pid=30579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C746A6E6877747A68796C736E7A6577686F69716A6278756967687265646562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252234.749:3483): pid=30579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252234.752:3484): pid=30579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252234.917:3485): pid=30579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252234.918:3486): pid=30579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252234.922:3487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252234.922:3488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252234.964:3489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252234.964:3490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252234.994:3491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252234.994:3492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252235.067:3493): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252235.067:3494): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252235.097:3495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252235.097:3496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252235.139:3497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252235.139:3498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252235.174:3499): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252235.174:3500): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252235.227:3501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252235.227:3502): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252235.289:3503): pid=30641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252235.289:3504): pid=30641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6C6F6D6F726D6A64616966796A786E79647973656C7777796C6E6461717962203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252235.290:3505): pid=30641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252235.294:3506): pid=30641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252235.466:3507): pid=30641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252235.466:3508): pid=30641 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252235.470:3509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252235.470:3510): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252235.512:3511): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252235.512:3512): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252235.549:3513): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252235.549:3514): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252235.591:3515): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252235.591:3516): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252235.622:3517): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252235.622:3518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252235.664:3519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252235.664:3520): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252235.722:3521): pid=30685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252235.722:3522): pid=30685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F6B776564786F706D7373766F7A687278726A686E6B797376617370636565203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252235.724:3523): pid=30685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252235.726:3524): pid=30685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252235.910:3525): pid=30685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252235.910:3526): pid=30685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252235.915:3527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252235.916:3528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252235.956:3529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252235.957:3530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252235.986:3531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252235.987:3532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.056:3533): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.056:3534): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252236.085:3535): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252236.086:3536): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.127:3537): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.127:3538): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252236.162:3539): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252236.162:3540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.260:3541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.260:3542): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252236.308:3543): pid=30747 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252236.308:3544): pid=30747 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6368796B70666B6B7876666970626C666C636C686D7464736A6B6562676A6A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252236.308:3545): pid=30747 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252236.310:3546): pid=30747 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252236.483:3547): pid=30747 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252236.483:3548): pid=30747 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252236.487:3549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252236.488:3550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.529:3551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.529:3552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252236.569:3553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252236.570:3554): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.611:3555): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.611:3556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252236.640:3557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252236.640:3558): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.682:3559): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.682:3560): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252236.727:3561): pid=30790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252236.727:3562): pid=30790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E636F63696D6F74666266676D6F6D627068657A7064787468616367636C61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252236.728:3563): pid=30790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252236.731:3564): pid=30790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252236.867:3565): pid=30790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252236.867:3566): pid=30790 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252236.870:3567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252236.870:3568): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.912:3569): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.912:3570): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252236.937:3571): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252236.937:3572): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252236.998:3573): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252236.999:3574): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252237.031:3575): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.031:3576): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252237.073:3577): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252237.073:3578): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252237.102:3579): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.103:3580): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252237.158:3581): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252237.158:3582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252237.205:3583): pid=30852 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252237.206:3584): pid=30852 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A68696F73757668626A75706F7461736F6B636C796A6C7A687969676371666E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252237.206:3585): pid=30852 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252237.209:3586): pid=30852 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252237.380:3587): pid=30852 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252237.380:3588): pid=30852 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252237.384:3589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.384:3590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252237.427:3591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252237.427:3592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252237.456:3593): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.457:3594): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252237.497:3595): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252237.498:3596): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252237.526:3597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.527:3598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252237.567:3599): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252237.568:3600): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252237.618:3601): pid=30895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252237.618:3602): pid=30895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66636D7766616D686B6F6D66656F7764627768736574686F686E6D69796C6772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252237.619:3603): pid=30895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252237.622:3604): pid=30895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252237.815:3605): pid=30895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252237.815:3606): pid=30895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252237.819:3607): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.819:3608): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252237.861:3609): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252237.861:3610): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252237.892:3611): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.892:3612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252237.947:3613): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252237.947:3614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252237.976:3615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252237.976:3616): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.017:3617): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.018:3618): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252238.053:3619): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252238.054:3620): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.119:3621): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.119:3622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252238.183:3623): pid=30957 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252238.183:3624): pid=30957 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D636B706D756B677579706E65617278756A706879696C7663666B6E6B706667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252238.184:3625): pid=30957 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252238.186:3626): pid=30957 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252238.356:3627): pid=30957 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252238.356:3628): pid=30957 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252238.359:3629): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252238.359:3630): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.391:3631): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.391:3632): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252238.426:3633): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252238.426:3634): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.468:3635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.468:3636): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252238.497:3637): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252238.497:3638): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.538:3639): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.538:3640): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252238.592:3641): pid=31000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252238.592:3642): pid=31000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7377676B6B6E707A6A72647261646267646C7674777863636370786876647A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252238.593:3643): pid=31000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252238.596:3644): pid=31000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252238.782:3645): pid=31000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252238.783:3646): pid=31000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252238.791:3647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252238.791:3648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.832:3649): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.833:3650): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252238.859:3651): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252238.859:3652): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.904:3653): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.905:3654): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252238.934:3655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252238.934:3656): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252238.976:3657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252238.976:3658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252239.013:3659): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252239.013:3660): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252239.072:3661): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252239.072:3662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252239.132:3663): pid=31062 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252239.132:3664): pid=31062 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7972736C75777670736764666C6377687868657A747A61696377796F75616E75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252239.133:3665): pid=31062 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252239.135:3666): pid=31062 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252239.307:3667): pid=31062 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252239.307:3668): pid=31062 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252239.311:3669): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252239.312:3670): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252239.352:3671): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252239.353:3672): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252239.392:3673): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252239.392:3674): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252239.433:3675): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252239.433:3676): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252239.467:3677): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252239.468:3678): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252239.509:3679): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252239.509:3680): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252239.572:3681): pid=31105 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252239.573:3682): pid=31105 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786A6A6F7261686F69756A707865616E6E69626B66617475707777756378746F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252239.574:3683): pid=31105 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252239.577:3684): pid=31105 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252239.768:3685): pid=31105 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252239.768:3686): pid=31105 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252239.772:3687): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252239.773:3688): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252239.814:3689): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252239.814:3690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252239.846:3691): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252239.846:3692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252240.045:3693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252240.045:3694): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252240.105:3695): pid=31135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252240.106:3696): pid=31135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A666D6A79667877686F646D72636C65616171756D6F73646369787766666A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252240.107:3697): pid=31135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252240.109:3698): pid=31135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252240.287:3699): pid=31135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252240.287:3700): pid=31135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252240.292:3701): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252240.293:3702): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252240.537:3703): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252240.537:3704): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252240.565:3705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252240.565:3706): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252240.606:3707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252240.606:3708): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252240.639:3709): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252240.639:3710): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252240.680:3711): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252240.680:3712): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252240.734:3713): pid=31183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252240.734:3714): pid=31183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61686470716A6A77646A6E656B757673687269746D6A7168737779726B6C7275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252240.734:3715): pid=31183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252240.736:3716): pid=31183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252240.884:3717): pid=31183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252240.884:3718): pid=31183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252240.888:3719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252240.888:3720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252240.929:3721): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252240.929:3722): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252240.964:3723): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252240.965:3724): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252241.005:3725): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252241.006:3726): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252241.036:3727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252241.036:3728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252241.077:3729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252241.078:3730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252241.135:3731): pid=31226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252241.135:3732): pid=31226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6967746F666C706B65726B7A72736F6571766F676C67716F6F6F6F7A6F777562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252241.136:3733): pid=31226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252241.138:3734): pid=31226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252241.324:3735): pid=31226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252241.325:3736): pid=31226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252241.328:3737): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252241.328:3738): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252241.369:3739): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252241.370:3740): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252241.399:3741): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252241.399:3742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252248.101:3743): pid=28556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=30644 suid=74 rport=57796 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=60.220.241.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252248.101:3744): pid=28556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=30644 suid=74 rport=57796 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=60.220.241.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781252248.102:3745): pid=28556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=60.220.241.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252250.379:3746): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252250.379:3747): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252250.435:3748): pid=31256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252250.436:3749): pid=31256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77707063656A726D62696166706E70626A6F79637979746C65636E6E776F756D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252250.436:3750): pid=31256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252250.439:3751): pid=31256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252250.882:3752): pid=31256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252250.882:3753): pid=31256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252250.885:3754): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252250.885:3755): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252251.072:3756): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252251.072:3757): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252251.122:3758): pid=31317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252251.122:3759): pid=31317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7063696371637A6E7177646E67626877696674616971657874737072706F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252251.123:3760): pid=31317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252251.125:3761): pid=31317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252255.396:3762): pid=31317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252255.397:3763): pid=31317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252255.401:3764): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252255.401:3765): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252255.581:3766): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252255.581:3767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252255.639:3768): pid=31334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252255.639:3769): pid=31334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F6E62676369666671626861706E666570706A706C6B78757176736D636C69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252255.640:3770): pid=31334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252255.641:3771): pid=31334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252259.851:3772): pid=31334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252259.851:3773): pid=31334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252259.854:3774): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252259.854:3775): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252260.871:3776): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252260.871:3777): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252260.929:3778): pid=31351 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252260.930:3779): pid=31351 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72686764687A796168627A6F697771796A617867786873636A7465736B737975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252260.931:3780): pid=31351 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252260.933:3781): pid=31351 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252261.108:3782): pid=31351 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252261.108:3783): pid=31351 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252261.112:3784): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252261.112:3785): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252261.419:3786): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252261.419:3787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252261.476:3788): pid=31374 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252261.476:3789): pid=31374 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797274686A6B70677273757576626E6E6D677672667077697065656174696E6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252261.477:3790): pid=31374 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252261.479:3791): pid=31374 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252265.754:3792): pid=31374 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252265.755:3793): pid=31374 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252265.757:3794): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252265.757:3795): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252265.992:3796): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252265.992:3797): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252266.031:3798): pid=31391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252266.032:3799): pid=31391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6565706C626F7475796F637474777664706366736E646B616C72727A7A696668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252266.032:3800): pid=31391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252266.034:3801): pid=31391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252266.199:3802): pid=31391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252266.199:3803): pid=31391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252266.203:3804): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252266.203:3805): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252266.501:3806): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252266.501:3807): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252266.550:3808): pid=31414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252266.550:3809): pid=31414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67637873797671646766777775626C77767674747665657565726E777A617A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252266.551:3810): pid=31414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252266.552:3811): pid=31414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252270.797:3812): pid=31414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252270.798:3813): pid=31414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252270.802:3814): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252270.802:3815): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252270.927:3816): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252270.927:3817): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252270.982:3818): pid=31431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252270.982:3819): pid=31431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A6B677166766F6F77787A687A6A6E6F726C776A74746176786A6663776F78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252270.983:3820): pid=31431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252270.987:3821): pid=31431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252275.211:3822): pid=31431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252275.211:3823): pid=31431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252275.215:3824): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252275.215:3825): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252275.448:3826): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252275.448:3827): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252275.502:3828): pid=31448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252275.502:3829): pid=31448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726565796A6E786E73616D6462706F726879787A727767756E6D736475757662203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252275.503:3830): pid=31448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252275.506:3831): pid=31448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252275.684:3832): pid=31448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252275.685:3833): pid=31448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252275.689:3834): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252275.689:3835): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252275.859:3836): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252275.860:3837): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252275.920:3838): pid=31471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252275.921:3839): pid=31471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6C676D73726B667875697761646F776B676D676A79676B786E6C7262706864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252275.921:3840): pid=31471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252275.924:3841): pid=31471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252280.225:3842): pid=31471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252280.225:3843): pid=31471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252280.229:3844): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252280.229:3845): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252280.358:3846): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252280.358:3847): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252280.404:3848): pid=31488 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252280.404:3849): pid=31488 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F657379716A63616D626F6E79746377726C616C796977726861776F69716D73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252280.404:3850): pid=31488 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252280.407:3851): pid=31488 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252284.707:3852): pid=31488 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252284.707:3853): pid=31488 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252284.711:3854): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252284.711:3855): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252284.892:3856): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252284.892:3857): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252284.954:3858): pid=31505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252284.954:3859): pid=31505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7366646E796971696567776F62646D757971737A736E6476766E747469696D67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252284.955:3860): pid=31505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252284.957:3861): pid=31505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252285.136:3862): pid=31505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252285.136:3863): pid=31505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252285.140:3864): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252285.140:3865): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252285.363:3866): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252285.363:3867): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252285.424:3868): pid=31528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252285.424:3869): pid=31528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64656B68727064666369677761767A786F6C676C676F6D726B7063786273706F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252285.425:3870): pid=31528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252285.428:3871): pid=31528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252285.742:3872): pid=31531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31532 suid=74 rport=49964 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252285.742:3873): pid=31531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31532 suid=74 rport=49964 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252287.202:3874): pid=31531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31532 suid=74 rport=49964 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252287.203:3875): pid=31531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252287.204:3876): pid=31531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252289.699:3877): pid=31528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252289.700:3878): pid=31528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252289.704:3879): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252289.704:3880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252289.832:3881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252289.832:3882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252289.886:3883): pid=31547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252289.887:3884): pid=31547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62627876657769787A6866756772646669677869636873777A6A6E79726D6F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252289.887:3885): pid=31547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252289.889:3886): pid=31547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252294.178:3887): pid=31547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252294.178:3888): pid=31547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252294.182:3889): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252294.182:3890): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252294.302:3891): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252294.302:3892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252294.359:3893): pid=31564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252294.360:3894): pid=31564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C736C666669617767776B65636D666B746E746762746C6C65787A6B6D617370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252294.360:3895): pid=31564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252294.363:3896): pid=31564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252294.585:3897): pid=31564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252294.585:3898): pid=31564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252294.588:3899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252294.588:3900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252294.773:3901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252294.773:3902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252294.825:3903): pid=31587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252294.826:3904): pid=31587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E6D656D6C66626E6573766665626179667362707563786664636E64677671203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252294.826:3905): pid=31587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252294.828:3906): pid=31587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252299.101:3907): pid=31587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252299.101:3908): pid=31587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252299.105:3909): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252299.105:3910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252299.223:3911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252299.223:3912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252299.279:3913): pid=31604 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252299.280:3914): pid=31604 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696C6A6F67727473796375766579726F6A787A776C766379786E6B6F736A75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252299.281:3915): pid=31604 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252299.284:3916): pid=31604 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252303.587:3917): pid=31604 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252303.587:3918): pid=31604 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252303.591:3919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252303.592:3920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252303.723:3921): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252303.723:3922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252303.763:3923): pid=31621 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252303.763:3924): pid=31621 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78686F6F6C78777064626F6D786C6D7676656C647264646B6F7A616E65706C71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252303.764:3925): pid=31621 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252303.765:3926): pid=31621 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252303.906:3927): pid=31621 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252303.906:3928): pid=31621 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252303.909:3929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252303.909:3930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252304.082:3931): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252304.082:3932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252304.126:3933): pid=31644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252304.126:3934): pid=31644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676361666174666B6F666872727172746A78627278626969617066756473706D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252304.127:3935): pid=31644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252304.129:3936): pid=31644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252308.344:3937): pid=31648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31649 suid=74 rport=45188 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252308.344:3938): pid=31648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31649 suid=74 rport=45188 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252308.389:3939): pid=31644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252308.389:3940): pid=31644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252308.394:3941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252308.394:3942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252308.531:3943): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252308.531:3944): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252308.596:3945): pid=31663 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252308.596:3946): pid=31663 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637578776374616C737572637561797061656F62706B74736970777972676274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252308.597:3947): pid=31663 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252308.598:3948): pid=31663 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252312.860:3949): pid=31663 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252312.861:3950): pid=31663 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252313.181:3951): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252313.181:3952): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252314.548:3953): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252314.548:3954): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252317.162:3955): pid=31667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31668 suid=74 rport=55842 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252317.162:3956): pid=31667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31668 suid=74 rport=55842 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1781252317.196:3957): pid=31682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252317.196:3958): pid=31682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617669746B6B6D6B6C746C6D626A796E6E676276706F6B776B6F666C6B7A6578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252317.197:3959): pid=31682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252317.198:3960): pid=31682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252317.335:3961): pid=31682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252317.335:3962): pid=31682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252317.536:3963): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252317.536:3964): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252317.873:3965): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252317.873:3966): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252317.893:3967): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252317.893:3968): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252318.154:3969): pid=31667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31668 suid=74 rport=55842 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252318.154:3970): pid=31667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252318.155:3971): pid=31667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252321.264:3972): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252321.264:3973): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252321.317:3974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252321.318:3975): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252321.359:3976): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252321.360:3977): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252321.393:3978): pid=31730 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252321.393:3979): pid=31730 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D6871677179737276626C6E6164747871796871646A686A7A72666F6D6469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252321.393:3980): pid=31730 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252321.395:3981): pid=31730 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252321.563:3982): pid=31730 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252321.563:3983): pid=31730 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252321.565:3984): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252321.565:3985): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252321.608:3986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252321.608:3987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252321.648:3988): pid=31748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252321.648:3989): pid=31748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A6576746E796D6E756F656C6570667A787A7A6D656D7664767A666F6E7369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252321.649:3990): pid=31748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252321.651:3991): pid=31748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252321.801:3992): pid=31748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252321.801:3993): pid=31748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252321.805:3994): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252321.805:3995): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252321.832:3996): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252321.832:3997): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252321.865:3998): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252321.865:3999): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252322.035:4000): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252322.035:4001): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252322.097:4002): pid=31778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252322.097:4003): pid=31778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75726A76626A7A74687A786F6A656E6E6F7174686A636362626F6975747A786F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252322.097:4004): pid=31778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252322.098:4005): pid=31778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252322.261:4006): pid=31778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252322.261:4007): pid=31778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252322.265:4008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252322.266:4009): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252322.491:4010): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252322.491:4011): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252322.523:4012): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252322.523:4013): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252322.564:4014): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252322.564:4015): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252322.599:4016): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252322.599:4017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252322.640:4018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252322.640:4019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252322.692:4020): pid=31826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252322.693:4021): pid=31826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6670736B6E6F6E74616E65656F6A69637A6D657A6464667474697A74796D636C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252322.693:4022): pid=31826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252322.695:4023): pid=31826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252322.876:4024): pid=31826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252322.876:4025): pid=31826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252322.881:4026): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252322.881:4027): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252322.912:4028): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252322.912:4029): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252322.967:4030): pid=31844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252322.967:4031): pid=31844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A736B7071766670656472686D6375687A61696865776E6D7279736769726E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252322.968:4032): pid=31844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252322.970:4033): pid=31844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252323.132:4034): pid=31844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252323.132:4035): pid=31844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252323.136:4036): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252323.136:4037): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252323.178:4038): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252323.178:4039): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252323.217:4040): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252323.217:4041): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252323.381:4042): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252323.381:4043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252323.406:4044): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252323.406:4045): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252323.447:4046): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252323.447:4047): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252323.479:4048): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252323.479:4049): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252323.523:4050): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252323.523:4051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252323.576:4052): pid=31906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252323.577:4053): pid=31906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74616778666166767462636D69657A78746B7870676A75617369636564776576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252323.577:4054): pid=31906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252323.579:4055): pid=31906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252323.785:4056): pid=31906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252323.785:4057): pid=31906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252323.789:4058): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252323.789:4059): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252323.832:4060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252323.832:4061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252323.887:4062): pid=31924 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252323.887:4063): pid=31924 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6E6C6D70757275636B76787776786468787A7069736D66776B736673666C6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252323.888:4064): pid=31924 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252323.890:4065): pid=31924 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252324.054:4066): pid=31924 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252324.054:4067): pid=31924 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252324.057:4068): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252324.057:4069): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252324.099:4070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252324.099:4071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252324.129:4072): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252324.129:4073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252324.170:4074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252324.171:4075): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252324.197:4076): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252324.198:4077): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252324.241:4078): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252324.241:4079): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252324.277:4080): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252324.277:4081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252324.385:4082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252324.385:4083): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252324.436:4084): pid=31986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252324.436:4085): pid=31986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A64646D64666F6E7977797577756E716265766F676D62667768696D746963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252324.437:4086): pid=31986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252324.440:4087): pid=31986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252324.617:4088): pid=31986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252324.618:4089): pid=31986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252324.621:4090): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252324.621:4091): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252324.663:4092): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252324.663:4093): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252324.708:4094): pid=32004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252324.708:4095): pid=32004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64756D77777563796D68776A796C6B6962666565656F616C746365756D76646C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252324.708:4096): pid=32004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252324.710:4097): pid=32004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252324.868:4098): pid=32004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252324.868:4099): pid=32004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252324.871:4100): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252324.871:4101): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252324.912:4102): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252324.912:4103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252324.940:4104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252324.940:4105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252324.990:4106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252324.990:4107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252325.016:4108): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252325.016:4109): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252325.058:4110): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252325.058:4111): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252325.092:4112): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252325.093:4113): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252325.405:4114): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252325.405:4115): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252325.471:4116): pid=32066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252325.471:4117): pid=32066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A676B69657A746F77736E6A726E686A616D6961697866716862666E6267776F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252325.472:4118): pid=32066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252325.475:4119): pid=32066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252325.664:4120): pid=32066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252325.664:4121): pid=32066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252325.669:4122): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252325.669:4123): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252325.710:4124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252325.710:4125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252325.763:4126): pid=32084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252325.763:4127): pid=32084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A646778766A68747566757371637A767A776474716B62686D626D796E6278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252325.764:4128): pid=32084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252325.766:4129): pid=32084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252326.579:4130): pid=32084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252326.579:4131): pid=32084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252326.898:4132): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252326.899:4133): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.136:4134): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.136:4135): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252327.157:4136): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252327.157:4137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.218:4138): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.218:4139): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252327.237:4140): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252327.237:4141): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.278:4142): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.279:4143): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252327.308:4144): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252327.308:4145): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.351:4146): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.351:4147): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252327.398:4148): pid=32146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252327.398:4149): pid=32146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79797A7573657764737068647970736C667A64656C7A6B73676661636A6C7073203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252327.398:4150): pid=32146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252327.400:4151): pid=32146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252327.566:4152): pid=32146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252327.566:4153): pid=32146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252327.570:4154): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252327.570:4155): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.611:4156): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.612:4157): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252327.655:4158): pid=32164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252327.656:4159): pid=32164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736B72646B716F68727562776866626E77646C636A6D717861726E7474626362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252327.656:4160): pid=32164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252327.658:4161): pid=32164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252327.808:4162): pid=32164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252327.808:4163): pid=32164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252327.811:4164): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252327.811:4165): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.852:4166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.853:4167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252327.875:4168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252327.875:4169): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.927:4170): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.928:4171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252327.954:4172): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252327.954:4173): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252327.994:4174): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252327.995:4175): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252328.021:4176): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252328.021:4177): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252328.072:4178): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252328.072:4179): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252328.115:4180): pid=32226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252328.115:4181): pid=32226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777378756A727675796669706C7A786171666C636C65716E6368637375646275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252328.116:4182): pid=32226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252328.119:4183): pid=32226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252328.316:4184): pid=32226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252328.316:4185): pid=32226 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252328.320:4186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252328.320:4187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252328.360:4188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252328.360:4189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252328.415:4190): pid=32244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252328.415:4191): pid=32244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7478747768657777646A686A79696D616F687064626B7977676A64776D6F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252328.416:4192): pid=32244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252328.418:4193): pid=32244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252328.595:4194): pid=32244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252328.596:4195): pid=32244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252328.600:4196): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252328.600:4197): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252328.642:4198): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252328.642:4199): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252328.676:4200): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252328.676:4201): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252328.751:4202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252328.752:4203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252328.776:4204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252328.776:4205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252328.817:4206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252328.817:4207): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252328.844:4208): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252328.844:4209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252328.885:4210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252328.885:4211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252328.935:4212): pid=32306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252328.935:4213): pid=32306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E70776378736F786B756D6A6E6372617361747663627062677665616165616B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252328.935:4214): pid=32306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252328.937:4215): pid=32306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252329.082:4216): pid=32306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252329.082:4217): pid=32306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252329.086:4218): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252329.086:4219): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252329.112:4220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252329.112:4221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252329.167:4222): pid=32324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252329.167:4223): pid=32324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7367666A686E726D62676162666B69657564677270637A697A67707167726264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252329.168:4224): pid=32324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252329.170:4225): pid=32324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252329.310:4226): pid=32324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252329.311:4227): pid=32324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252329.315:4228): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252329.315:4229): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252329.356:4230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252329.356:4231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252329.408:4232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252329.408:4233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252329.430:4234): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252329.430:4235): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252329.447:4236): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252329.447:4237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252329.488:4238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252329.488:4239): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252329.511:4240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252329.511:4241): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252329.570:4242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252329.570:4243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252329.620:4244): pid=32386 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252329.620:4245): pid=32386 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6379746569676A6472617A6378686570627A6578726166746C7366736B7A6966203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252329.620:4246): pid=32386 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252329.623:4247): pid=32386 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252329.790:4248): pid=32386 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252329.790:4249): pid=32386 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252329.793:4250): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252329.793:4251): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252329.834:4252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252329.834:4253): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252329.871:4254): pid=32404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252329.871:4255): pid=32404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C657378726E636D6B6B6D6A6A6F7765786F676D6F6B747270796B6A686F6C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252329.871:4256): pid=32404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252329.873:4257): pid=32404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252330.033:4258): pid=32404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252330.034:4259): pid=32404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252330.036:4260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252330.036:4261): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252330.077:4262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252330.077:4263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252330.100:4264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252330.100:4265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252330.711:4266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252330.711:4267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252330.729:4268): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252330.729:4269): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252330.771:4270): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252330.771:4271): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252330.799:4272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252330.799:4273): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252330.855:4274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252330.855:4275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252330.903:4276): pid=32466 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252330.903:4277): pid=32466 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696B74726D69667367717571706D63617561706E626262686876616670637477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252330.903:4278): pid=32466 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252330.905:4279): pid=32466 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252331.052:4280): pid=32466 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252331.053:4281): pid=32466 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252331.056:4282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252331.056:4283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252331.097:4284): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252331.098:4285): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252331.161:4286): pid=32484 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252331.162:4287): pid=32484 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70696F726C77706E716974637A6275627261746475686A726D62616769746274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252331.162:4288): pid=32484 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252331.166:4289): pid=32484 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252331.341:4290): pid=32484 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252331.342:4291): pid=32484 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252331.345:4292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252331.346:4293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252331.387:4294): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252331.387:4295): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252331.412:4296): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252331.412:4297): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252331.463:4298): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252331.463:4299): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252331.491:4300): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252331.491:4301): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252331.532:4302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252331.532:4303): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252331.564:4304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252331.564:4305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252331.632:4306): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252331.632:4307): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252331.691:4308): pid=32546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252331.692:4309): pid=32546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B706B626869656C67677068626D75696163726D677566726175657879726D6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252331.693:4310): pid=32546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252331.695:4311): pid=32546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252331.882:4312): pid=32546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252331.882:4313): pid=32546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252331.885:4314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252331.885:4315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252331.926:4316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252331.927:4317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252331.983:4318): pid=32564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252331.983:4319): pid=32564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61776D6B6D696D67676D796A656F6A7779636F6A67737579636E6D746672746C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252331.984:4320): pid=32564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252331.985:4321): pid=32564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252332.153:4322): pid=32564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252332.153:4323): pid=32564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252332.157:4324): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252332.157:4325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252332.198:4326): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252332.199:4327): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252332.225:4328): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252332.225:4329): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252332.301:4330): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252332.302:4331): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252332.327:4332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252332.327:4333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252332.369:4334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252332.369:4335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252332.397:4336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252332.398:4337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252332.460:4338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252332.460:4339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252332.519:4340): pid=32626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252332.519:4341): pid=32626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757277657271736D676369777A6170636767766B7A777471757866616E647366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252332.519:4342): pid=32626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252332.522:4343): pid=32626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252332.692:4344): pid=32626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252332.693:4345): pid=32626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252332.696:4346): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252332.696:4347): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252332.737:4348): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252332.738:4349): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252332.797:4350): pid=32644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252332.797:4351): pid=32644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D736C6B69687576666C6D707A63786863707367726672717661786771656162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252332.798:4352): pid=32644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252332.800:4353): pid=32644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252332.993:4354): pid=32644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252332.993:4355): pid=32644 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252332.996:4356): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252332.996:4357): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252333.037:4358): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252333.038:4359): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252333.063:4360): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252333.063:4361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252333.317:4362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252333.317:4363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252333.370:4364): pid=32674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252333.371:4365): pid=32674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D67747A69647363636262727A6B7564736F786267686C67637775656C616265203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252333.371:4366): pid=32674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252333.374:4367): pid=32674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252333.519:4368): pid=32674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252333.519:4369): pid=32674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252333.525:4370): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252333.525:4371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252333.795:4372): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252333.795:4373): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252333.828:4374): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252333.828:4375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252333.871:4376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252333.871:4377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252333.907:4378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252333.907:4379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252333.948:4380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252333.948:4381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252334.001:4382): pid=32722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252334.001:4383): pid=32722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C77756F78797462677062636A616C7276686E7366736468686F6A66636B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252334.002:4384): pid=32722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252334.004:4385): pid=32722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252334.174:4386): pid=32722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252334.175:4387): pid=32722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252334.178:4388): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252334.178:4389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252334.220:4390): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252334.220:4391): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252334.278:4392): pid=32740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252334.278:4393): pid=32740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75766C716B727A78626474777964776D6C66726C616E6A6D68746F7962717261203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252334.279:4394): pid=32740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252334.281:4395): pid=32740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252334.469:4396): pid=32740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252334.469:4397): pid=32740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252334.473:4398): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252334.473:4399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252334.515:4400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252334.515:4401): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252334.545:4402): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252334.545:4403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252345.352:4404): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252345.352:4405): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252345.412:4406): pid=32770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252345.413:4407): pid=32770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7177626E61636A7965737773667A6E6970786A676E726A6469756A6965626978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252345.413:4408): pid=32770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252345.415:4409): pid=32770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252348.676:4410): pid=32770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252348.676:4411): pid=32770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252348.681:4412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252348.681:4413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252350.275:4414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252350.275:4415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252350.331:4416): pid=32787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252350.331:4417): pid=32787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756169626F616E646F70776B627473686F6570756579796A727A776572617573203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252350.332:4418): pid=32787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252350.335:4419): pid=32787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252350.641:4420): pid=32787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252350.641:4421): pid=32787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252350.645:4422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252350.646:4423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252350.702:4424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252350.702:4425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252350.765:4426): pid=32805 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252350.765:4427): pid=32805 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7964667179696D626A7A787074677A64796B68617771716D726A6466636D78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252350.766:4428): pid=32805 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252350.769:4429): pid=32805 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252351.101:4430): pid=32805 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252351.101:4431): pid=32805 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252351.104:4432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252351.105:4433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252351.219:4434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252351.219:4435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252351.270:4436): pid=32823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252351.270:4437): pid=32823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676B72646C6D6268726B73656C666F7272656A7574726A68736F797571746963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252351.271:4438): pid=32823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252351.274:4439): pid=32823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252351.839:4440): prog-id=145 op=LOAD
type=BPF msg=audit(1781252351.839:4441): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.839:4442): prog-id=146 op=LOAD
type=BPF msg=audit(1781252351.839:4443): prog-id=147 op=LOAD
type=BPF msg=audit(1781252351.839:4444): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.839:4445): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.842:4446): prog-id=148 op=LOAD
type=BPF msg=audit(1781252351.842:4447): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.842:4448): prog-id=149 op=LOAD
type=BPF msg=audit(1781252351.842:4449): prog-id=150 op=LOAD
type=BPF msg=audit(1781252351.842:4450): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.842:4451): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.843:4452): prog-id=151 op=LOAD
type=BPF msg=audit(1781252351.843:4453): prog-id=152 op=LOAD
type=BPF msg=audit(1781252351.843:4454): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.843:4455): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.844:4456): prog-id=153 op=LOAD
type=BPF msg=audit(1781252351.844:4457): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252351.845:4458): prog-id=154 op=LOAD
type=BPF msg=audit(1781252351.845:4459): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252351.906:4460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nftables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252351.936:4461): pid=32823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252351.936:4462): pid=32823 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252351.941:4463): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252351.941:4464): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252352.187:4465): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252352.187:4466): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252352.213:4467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252352.213:4468): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252352.255:4469): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252352.255:4470): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252352.280:4471): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252352.280:4472): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252352.322:4473): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252352.322:4474): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252352.365:4475): pid=32913 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252352.365:4476): pid=32913 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66797974747A7371776861706F666665626D79696E786F6874687070636A6367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252352.366:4477): pid=32913 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252352.369:4478): pid=32913 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252352.503:4479): pid=32913 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252352.503:4480): pid=32913 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252352.508:4481): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252352.508:4482): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252352.549:4483): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252352.549:4484): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252352.582:4485): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252352.582:4486): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252352.625:4487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252352.625:4488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252352.650:4489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252352.650:4490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252352.692:4491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252352.692:4492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252352.741:4493): pid=32956 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252352.741:4494): pid=32956 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6875626F757963766676797170676B667476646E7879656A7068697978726F74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252352.742:4495): pid=32956 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252352.745:4496): pid=32956 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252352.935:4497): pid=32956 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252352.935:4498): pid=32956 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252352.941:4499): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252352.941:4500): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252352.983:4501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252352.983:4502): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252353.014:4503): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252353.014:4504): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252353.099:4505): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252353.099:4506): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252353.138:4507): pid=32986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252353.139:4508): pid=32986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D776B6673677277747873656D67746A76787666616B6D746A72686D6C7A6A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252353.139:4509): pid=32986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252353.141:4510): pid=32986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=filter:2 family=10 entries=4 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=raw:2 family=10 entries=3 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=nat:2 family=2 entries=5 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=raw:2 family=2 entries=3 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=filter:2 family=2 entries=4 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=nat:2 family=1 entries=5 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=raw:2 family=1 entries=3 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252353.308:4511): table=filter:2 family=1 entries=4 op=nft_register_chain pid=32989 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1781252353.308:4511): arch=c000003e syscall=46 success=yes exit=2212 a0=3 a1=7fff053035b0 a2=0 a3=7f347bdd7bc4 items=0 ppid=32988 pid=32989 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252353.308:4511): proctitle=6E6674002D66002F6574632F6E667461626C65732F69707461626C65732E6E6674
type=USER_END msg=audit(1781252353.346:4512): pid=32986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252353.347:4513): pid=32986 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252353.350:4514): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252353.350:4515): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252353.720:4516): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252353.720:4517): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252353.777:4518): pid=33004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252353.777:4519): pid=33004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74746A77646D626E796B70676370637A70666979726B716F726A7773686B7079203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252353.778:4520): pid=33004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252353.780:4521): pid=33004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252353.966:4522): pid=33004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252353.966:4523): pid=33004 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252353.970:4524): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252353.970:4525): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252354.083:4526): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252354.083:4527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252354.112:4528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252354.112:4529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252354.164:4530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252354.164:4531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252354.205:4532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252354.205:4533): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252354.374:4534): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252354.374:4535): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252354.439:4536): pid=33053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252354.439:4537): pid=33053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67707365646770657A776871717A67726C68756E787679706D6E75727A646471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252354.440:4538): pid=33053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252354.442:4539): pid=33053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252354.619:4540): pid=33053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252354.619:4541): pid=33053 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252354.622:4542): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252354.623:4543): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252354.664:4544): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252354.664:4545): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252354.694:4546): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252354.694:4547): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252354.737:4548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252354.737:4549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252354.769:4550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252354.769:4551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252354.811:4552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252354.811:4553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252354.875:4554): pid=33096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252354.875:4555): pid=33096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A686874776A61726477657966636E626379716F657A766D726C6F7778706362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252354.876:4556): pid=33096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252354.878:4557): pid=33096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252355.087:4558): pid=33096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252355.087:4559): pid=33096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252355.091:4560): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252355.091:4561): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252355.132:4562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252355.132:4563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252355.158:4564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252355.158:4565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252355.270:4566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252355.270:4567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252355.304:4568): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252355.305:4569): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252355.348:4570): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252355.348:4571): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252355.382:4572): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252355.382:4573): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252355.531:4574): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252355.531:4575): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252355.590:4576): pid=33158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252355.590:4577): pid=33158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E646161666466707875696370756C74756C6D766D717065676D6767706F65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252355.591:4578): pid=33158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252355.594:4579): pid=33158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252355.780:4580): pid=33158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252355.781:4581): pid=33158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252355.784:4582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252355.784:4583): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252355.827:4584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252355.828:4585): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252355.872:4586): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252355.872:4587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252356.527:4588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252356.527:4589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252356.549:4590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252356.549:4591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252357.348:4592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252357.348:4593): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252357.387:4594): pid=33201 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252357.388:4595): pid=33201 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C62706B797A696667776372667876796E666269716E73737368686E6F7472203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252357.388:4596): pid=33201 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252357.390:4597): pid=33201 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252357.527:4598): pid=33201 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252357.528:4599): pid=33201 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252357.531:4600): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252357.531:4601): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252357.572:4602): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252357.572:4603): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252357.604:4604): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252357.604:4605): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252357.738:4606): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252357.738:4607): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252357.771:4608): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252357.771:4609): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252357.813:4610): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252357.813:4611): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252357.851:4612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252357.851:4613): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252357.916:4614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252357.916:4615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252357.975:4616): pid=33263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252357.975:4617): pid=33263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C616679786C6172626B7A6D6964756C666A726874796467616970766B6D74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252357.975:4618): pid=33263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252357.978:4619): pid=33263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252358.148:4620): pid=33263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252358.149:4621): pid=33263 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252358.152:4622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252358.152:4623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252358.193:4624): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252358.194:4625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252358.216:4626): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252358.216:4627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252358.257:4628): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252358.258:4629): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252358.275:4630): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252358.275:4631): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252358.315:4632): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252358.316:4633): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252358.374:4634): pid=33306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252358.374:4635): pid=33306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777575727A65697171797368726D7174666E6F6D6A617A6F6676736F6A727873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252358.374:4636): pid=33306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252358.376:4637): pid=33306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252358.518:4638): pid=33306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252358.519:4639): pid=33306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252358.522:4640): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252358.522:4641): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252358.566:4642): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252358.566:4643): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252358.593:4644): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252358.594:4645): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252358.691:4646): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252358.691:4647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252358.719:4648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252358.719:4649): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252358.760:4650): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252358.760:4651): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252358.791:4652): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252358.791:4653): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252358.841:4654): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252358.841:4655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252358.885:4656): pid=33368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252358.886:4657): pid=33368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6772656B726A626B6561626C6E6D63657463636564756567757A7967616773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252358.886:4658): pid=33368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252358.888:4659): pid=33368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252359.043:4660): pid=33368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252359.043:4661): pid=33368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252359.047:4662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252359.047:4663): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252359.089:4664): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252359.089:4665): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252359.126:4666): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252359.126:4667): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252359.168:4668): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252359.168:4669): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252359.196:4670): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252359.196:4671): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252359.238:4672): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252359.239:4673): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252359.282:4674): pid=33411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252359.282:4675): pid=33411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697377656C63617866796E707A75626B72637571786F6A77696E636E70686C6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252359.282:4676): pid=33411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252359.285:4677): pid=33411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252359.458:4678): pid=33411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252359.458:4679): pid=33411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252359.462:4680): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252359.462:4681): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252359.503:4682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252359.503:4683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252359.535:4684): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252359.535:4685): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252359.649:4686): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252359.650:4687): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252359.681:4688): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252359.682:4689): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252359.723:4690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252359.723:4691): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252359.760:4692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252359.760:4693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252360.927:4694): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252360.928:4695): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252360.989:4696): pid=33473 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252360.989:4697): pid=33473 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61726474687279767678657262746E76727A61716769787661796C7577746A65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252360.990:4698): pid=33473 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252360.991:4699): pid=33473 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252361.159:4700): pid=33473 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252361.159:4701): pid=33473 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252361.162:4702): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252361.162:4703): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252361.204:4704): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252361.204:4705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252361.228:4706): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252361.228:4707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252361.270:4708): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252361.270:4709): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252361.294:4710): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252361.294:4711): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252361.336:4712): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252361.336:4713): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252361.396:4714): pid=33516 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252361.396:4715): pid=33516 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A617774676A7279626B666B6B7369716A696362757567626D656764646B6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252361.396:4716): pid=33516 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252361.399:4717): pid=33516 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252361.579:4718): pid=33516 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252361.579:4719): pid=33516 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252361.582:4720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252361.582:4721): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252361.624:4722): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252361.624:4723): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252361.648:4724): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252361.648:4725): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252361.759:4726): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252361.760:4727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252361.818:4728): pid=33546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252361.818:4729): pid=33546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767166676E6A7270776D717766647373696E71697362696E706F796171776D7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252361.819:4730): pid=33546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252361.821:4731): pid=33546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252362.257:4732): pid=33546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252362.257:4733): pid=33546 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252362.261:4734): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252362.261:4735): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252362.364:4736): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252362.365:4737): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252362.424:4738): pid=33611 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252362.424:4739): pid=33611 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6468786F6E65766E6A6E68796469657A717365756B76797272686369676F676D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252362.425:4740): pid=33611 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252362.427:4741): pid=33611 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252362.647:4742): pid=33611 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252362.647:4743): pid=33611 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252362.651:4744): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252362.651:4745): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252362.887:4746): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252362.888:4747): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252362.948:4748): pid=33628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252362.948:4749): pid=33628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7475777976787976676B766F6562716478756D727069656B746E796576636C79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252362.949:4750): pid=33628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252362.952:4751): pid=33628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1781252363.107:4752): table=raw:3 family=1 entries=2 op=nft_register_chain pid=33631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252363.107:4752): table=filter:3 family=1 entries=1 op=nft_register_chain pid=33631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1781252363.107:4752): arch=c000003e syscall=46 success=yes exit=192 a0=3 a1=7ffe3e037ed0 a2=0 a3=7f124868dbc4 items=0 ppid=33630 pid=33631 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252363.107:4752): proctitle=6E6674002D66002F6574632F6E667461626C65732F747269706C656F2D636861696E732E6E6674
type=USER_END msg=audit(1781252363.119:4753): pid=33628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252363.120:4754): pid=33628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252363.123:4755): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252363.123:4756): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252363.283:4757): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252363.284:4758): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252363.335:4759): pid=33645 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252363.335:4760): pid=33645 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706473776B7A646666676F6E74736D6274776A6E73716B746C6E786A6B69776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252363.336:4761): pid=33645 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252363.339:4762): pid=33645 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1781252363.516:4763): table=raw:4 family=1 entries=4 op=nft_register_rule pid=33650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1781252363.516:4763): table=filter:4 family=1 entries=114 op=nft_register_chain pid=33650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1781252363.516:4763): arch=c000003e syscall=46 success=yes exit=35428 a0=3 a1=7ffd726a3d40 a2=0 a3=7f43f5cb5bc4 items=0 ppid=33648 pid=33650 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252363.516:4763): proctitle=6E6674002D66002D
type=USER_END msg=audit(1781252363.531:4764): pid=33645 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252363.532:4765): pid=33645 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252363.535:4766): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252363.535:4767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252363.681:4768): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252363.681:4769): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252363.726:4770): pid=33664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252363.727:4771): pid=33664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6265666667657A647261657877616A6C7579737A75697A676F7A627967656367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252363.727:4772): pid=33664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252363.728:4773): pid=33664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252363.889:4774): pid=33664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252363.889:4775): pid=33664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252363.894:4776): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252363.894:4777): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252364.014:4778): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252364.014:4779): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252364.065:4780): pid=33680 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252364.065:4781): pid=33680 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72696F677970697271736863776B7066786C72717964676B70766D7361777070203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252364.066:4782): pid=33680 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252364.068:4783): pid=33680 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252364.360:4784): bool=virt_sandbox_use_netlink val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252364.360:4784): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffe0494fa0e a2=2 a3=0 items=0 ppid=33680 pid=33682 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252364.360:4784): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1781252364.942:4785): pid=33680 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252364.943:4786): pid=33680 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252364.949:4787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252364.949:4788): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252365.057:4789): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252365.057:4790): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252365.124:4791): pid=33711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252365.124:4792): pid=33711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72726A776A78667A6A647A6A6B6A6264797872636672637A6265706863646D72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252365.125:4793): pid=33711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252365.132:4794): pid=33711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252365.307:4795): pid=33711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252365.307:4796): pid=33711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252365.311:4797): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252365.311:4798): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252365.383:4799): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252365.383:4800): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252365.441:4801): pid=33727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252365.441:4802): pid=33727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6566686F6F786D626D756477766E63786165706D786375717179767376766D66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252365.441:4803): pid=33727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252365.444:4804): pid=33727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252365.624:4805): pid=33727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252365.625:4806): pid=33727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252365.629:4807): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252365.629:4808): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252365.722:4809): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252365.722:4810): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252365.786:4811): pid=33743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252365.786:4812): pid=33743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E646363716F6E666D6D7A62717A746E67726A616265746167746E766C767A61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252365.787:4813): pid=33743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252365.789:4814): pid=33743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1781252366.752:4815): auid=1002 ses=16 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252366.752:4815): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f5718c00000 a2=36aa51 a3=0 items=0 ppid=33745 pid=33802 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252366.752:4815): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252366.970:4816): pid=33745 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/cinder(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252367.010:4817): pid=33743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252367.011:4818): pid=33743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252367.016:4819): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252367.016:4820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252367.138:4821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252367.138:4822): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252367.196:4823): pid=33816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252367.196:4824): pid=33816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78707278736E64716C746177756574677176636A7269776571796B7872627779203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252367.197:4825): pid=33816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252367.204:4826): pid=33816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252367.352:4827): pid=33816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252367.352:4828): pid=33816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252367.357:4829): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252367.357:4830): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252367.449:4831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252367.449:4832): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252367.492:4833): pid=33832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252367.492:4834): pid=33832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6869747A6371636C616D656F62756B726763716273616F716579676F647A7066203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252367.492:4835): pid=33832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252367.494:4836): pid=33832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252367.679:4837): pid=33832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252367.679:4838): pid=33832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252367.683:4839): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252367.683:4840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252367.802:4841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252367.803:4842): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252367.857:4843): pid=33848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252367.857:4844): pid=33848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A67796773726C6E7562617A746B72766F756D6F786D7569696D7A71646A6161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252367.858:4845): pid=33848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252367.861:4846): pid=33848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252368.042:4847): pid=33848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252368.043:4848): pid=33848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252368.047:4849): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252368.047:4850): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252368.161:4851): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252368.161:4852): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252368.218:4853): pid=33864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252368.218:4854): pid=33864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A6B63696C737261736C64696A666D6F74657066756C7866646A6A6A6F6F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252368.219:4855): pid=33864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252368.222:4856): pid=33864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252368.409:4857): pid=33864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252368.409:4858): pid=33864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252368.413:4859): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252368.413:4860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252368.689:4861): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252368.689:4862): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252368.733:4863): pid=33880 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252368.733:4864): pid=33880 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6765636F69767374616F65756E656E6D626B6473696F63706A68716B707266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252368.734:4865): pid=33880 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252368.736:4866): pid=33880 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252371.927:4867): pid=33880 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252371.927:4868): pid=33880 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252371.931:4869): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252371.931:4870): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252372.058:4871): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252372.059:4872): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252372.112:4873): pid=33897 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252372.112:4874): pid=33897 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7970677777627362657563667470616C66676C617378696569636C6A74776879203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252372.113:4875): pid=33897 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252372.115:4876): pid=33897 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252372.296:4877): pid=33897 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252372.297:4878): pid=33897 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252372.300:4879): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252372.301:4880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252372.397:4881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252372.397:4882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252372.442:4883): pid=33914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252372.442:4884): pid=33914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6173746E637661706C74686A6A68756E616F767A6E616B796371747171787166203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252372.443:4885): pid=33914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252372.445:4886): pid=33914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252372.609:4887): pid=33914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252372.609:4888): pid=33914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252372.612:4889): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252372.612:4890): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252372.726:4891): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252372.726:4892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252372.786:4893): pid=33940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252372.786:4894): pid=33940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61666C7A7A61616A6A626A63616E6565626C657A7276716567696F6C63616263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252372.787:4895): pid=33940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252372.790:4896): pid=33940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252373.158:4897): pid=33940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252373.158:4898): pid=33940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252373.161:4899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252373.161:4900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781252373.171:4901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm-activate-cinder-volumes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252373.207:4902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm-activate-cinder-volumes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252373.257:4903): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252373.257:4904): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252373.281:4905): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252373.281:4906): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252373.322:4907): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252373.322:4908): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252373.354:4909): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252373.354:4910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252373.396:4911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252373.396:4912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252373.452:4913): pid=33996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252373.452:4914): pid=33996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6773766D7978627862796475647A787162727A6F64766478766D6E6777726D69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252373.453:4915): pid=33996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252373.457:4916): pid=33996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252373.641:4917): pid=33996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252373.642:4918): pid=33996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252373.645:4919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252373.645:4920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252373.689:4921): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252373.689:4922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252373.731:4923): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252373.731:4924): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252373.773:4925): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252373.773:4926): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252373.805:4927): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252373.805:4928): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252373.846:4929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252373.846:4930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252373.903:4931): pid=34039 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252373.904:4932): pid=34039 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7372696578796D636A787A756466727A637A6D7A6C756E7A6D6C687868647865203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252373.904:4933): pid=34039 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252373.907:4934): pid=34039 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252374.091:4935): pid=34039 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252374.091:4936): pid=34039 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252374.095:4937): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252374.095:4938): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252374.136:4939): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252374.136:4940): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252374.166:4941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252374.166:4942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252374.343:4943): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252374.343:4944): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252374.396:4945): pid=34069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252374.396:4946): pid=34069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C74646B716F687068776B617A726B706473636A66677462786D6E7A6C697277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252374.397:4947): pid=34069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252374.399:4948): pid=34069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252375.449:4949): prog-id=155 op=LOAD
type=BPF msg=audit(1781252375.449:4950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.449:4951): prog-id=156 op=LOAD
type=BPF msg=audit(1781252375.449:4952): prog-id=157 op=LOAD
type=BPF msg=audit(1781252375.449:4953): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.449:4954): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.452:4955): prog-id=158 op=LOAD
type=BPF msg=audit(1781252375.452:4956): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.452:4957): prog-id=159 op=LOAD
type=BPF msg=audit(1781252375.452:4958): prog-id=160 op=LOAD
type=BPF msg=audit(1781252375.452:4959): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.452:4960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.453:4961): prog-id=161 op=LOAD
type=BPF msg=audit(1781252375.453:4962): prog-id=162 op=LOAD
type=BPF msg=audit(1781252375.453:4963): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.453:4964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.455:4965): prog-id=163 op=LOAD
type=BPF msg=audit(1781252375.455:4966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.455:4967): prog-id=164 op=LOAD
type=BPF msg=audit(1781252375.455:4968): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.670:4969): prog-id=165 op=LOAD
type=BPF msg=audit(1781252375.670:4970): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.670:4971): prog-id=166 op=LOAD
type=BPF msg=audit(1781252375.670:4972): prog-id=167 op=LOAD
type=BPF msg=audit(1781252375.670:4973): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.670:4974): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.672:4975): prog-id=168 op=LOAD
type=BPF msg=audit(1781252375.672:4976): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.672:4977): prog-id=169 op=LOAD
type=BPF msg=audit(1781252375.672:4978): prog-id=170 op=LOAD
type=BPF msg=audit(1781252375.672:4979): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.672:4980): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.674:4981): prog-id=171 op=LOAD
type=BPF msg=audit(1781252375.674:4982): prog-id=172 op=LOAD
type=BPF msg=audit(1781252375.674:4983): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.674:4984): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.675:4985): prog-id=173 op=LOAD
type=BPF msg=audit(1781252375.675:4986): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252375.676:4987): prog-id=174 op=LOAD
type=BPF msg=audit(1781252375.676:4988): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781252375.697:4989): pid=34069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252375.698:4990): pid=34069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252375.701:4991): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252375.701:4992): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252375.818:4993): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252375.818:4994): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252375.863:4995): pid=34158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252375.863:4996): pid=34158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747272697A676870706D69796C64707075756D616D746E6F766F6866676A6A72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252375.865:4997): pid=34158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252375.869:4998): pid=34158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.051:4999): pid=34158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252376.051:5000): pid=34158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.055:5001): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252376.055:5002): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252376.105:5003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252376.105:5004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252376.158:5005): pid=34174 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252376.158:5006): pid=34174 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F626C7068746E7477676E6F666F79666B726A7075696D7A706B737977666C66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252376.159:5007): pid=34174 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252376.162:5008): pid=34174 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.324:5009): pid=34174 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252376.324:5010): pid=34174 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.328:5011): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252376.328:5012): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252376.494:5013): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252376.494:5014): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252376.543:5015): pid=34190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252376.543:5016): pid=34190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63767A77617765636A6F63657063736874787A6B6B6B6C756F71707167737674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252376.543:5017): pid=34190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252376.545:5018): pid=34190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.709:5019): pid=34190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252376.709:5020): pid=34190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.713:5021): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252376.713:5022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252376.761:5023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252376.761:5024): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252376.816:5025): pid=34206 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252376.816:5026): pid=34206 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63777164627A617364687078616877756F7A707179786C7167616E6D73656E71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252376.817:5027): pid=34206 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252376.819:5028): pid=34206 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.981:5029): pid=34206 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252376.981:5030): pid=34206 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252376.985:5031): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252376.986:5032): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252377.202:5033): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252377.202:5034): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252377.265:5035): pid=34222 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252377.265:5036): pid=34222 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C69666A666C6D6C66756273787477716C7269716668796C6D71747479746478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252377.265:5037): pid=34222 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252377.268:5038): pid=34222 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252377.458:5039): pid=34222 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252377.459:5040): pid=34222 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252377.463:5041): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252377.463:5042): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252377.597:5043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252377.597:5044): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252377.665:5045): pid=34238 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252377.665:5046): pid=34238 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B627A65666772646C67716A70636C74687A7174717A66756A6D737576636761203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252377.666:5047): pid=34238 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252377.668:5048): pid=34238 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252377.842:5049): pid=34238 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252377.842:5050): pid=34238 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252377.846:5051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252377.846:5052): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252377.889:5053): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252377.889:5054): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252377.951:5055): pid=34254 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252377.951:5056): pid=34254 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B6967686B6561646463676261676F61726A66616174697A7976746F7A7877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252377.952:5057): pid=34254 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252377.955:5058): pid=34254 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252378.131:5059): pid=34254 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252378.131:5060): pid=34254 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252378.135:5061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252378.135:5062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252378.277:5063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252378.277:5064): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252378.337:5065): pid=34270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252378.337:5066): pid=34270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7476786A6D77676E6575626167766E6A73746D6C747A6D7671726169776B62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252378.338:5067): pid=34270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252378.340:5068): pid=34270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252384.162:5069): pid=34270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252384.162:5070): pid=34270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252384.165:5071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252384.166:5072): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252385.215:5073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252385.215:5074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252385.256:5075): pid=34400 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252385.256:5076): pid=34400 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6374676D6479666965626978696E6F7062776D6468776A696F707771767878203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252385.256:5077): pid=34400 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252385.258:5078): pid=34400 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252385.454:5079): pid=34400 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252385.455:5080): pid=34400 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252385.702:5081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252385.702:5082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252385.703:5083): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252385.703:5084): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252385.737:5085): pid=34416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252385.737:5086): pid=34416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6272757164726A6775676F75626E6E70756C696768726D726B6D61627A647266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252385.738:5087): pid=34416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252385.740:5088): pid=34416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252385.904:5089): pid=34416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252385.905:5090): pid=34416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252385.908:5091): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252385.908:5092): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252386.035:5093): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252386.035:5094): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252386.089:5095): pid=34432 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252386.089:5096): pid=34432 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75797779626166797A78706D7A77736C67687575616D63736E66746772636C63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252386.090:5097): pid=34432 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252386.092:5098): pid=34432 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252386.266:5099): pid=34432 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252386.266:5100): pid=34432 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252386.269:5101): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252386.269:5102): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252386.335:5103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252386.335:5104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252386.393:5105): pid=34448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252386.394:5106): pid=34448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6B66766174786C766D766F6C6565736D68687772747A626A726B6C61676469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252386.394:5107): pid=34448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252386.397:5108): pid=34448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252386.576:5109): pid=34448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252386.576:5110): pid=34448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252386.579:5111): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252386.579:5112): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252386.739:5113): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252386.739:5114): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252386.793:5115): pid=34464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252386.794:5116): pid=34464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D7874646E726E657763726A65677862776A7161646A6F7A6B687274677A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252386.794:5117): pid=34464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252386.797:5118): pid=34464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252386.985:5119): pid=34464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252386.985:5120): pid=34464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252386.990:5121): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252386.990:5122): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252387.129:5123): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252387.129:5124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252387.187:5125): pid=34480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252387.188:5126): pid=34480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F7767736E65697965716D67747369676C66746C78617A6F6B6B746F716E63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252387.188:5127): pid=34480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252387.191:5128): pid=34480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252387.377:5129): pid=34480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252387.377:5130): pid=34480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252387.380:5131): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252387.380:5132): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252387.456:5133): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252387.456:5134): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252387.514:5135): pid=34496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252387.514:5136): pid=34496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6875727871656466766E686B72756E6F6A656E706F756F6E6D677278706A7873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252387.515:5137): pid=34496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252387.518:5138): pid=34496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252387.656:5139): pid=34496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252387.656:5140): pid=34496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252388.203:5141): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252388.203:5142): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252388.559:5143): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252388.559:5144): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252388.590:5145): pid=34512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252388.590:5146): pid=34512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6271706F68787271646762676B7974616273776D796A6C626178686B6272636B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252388.591:5147): pid=34512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252388.592:5148): pid=34512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252388.958:5149): pid=34512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252388.958:5150): pid=34512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252388.961:5151): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252388.961:5152): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252389.008:5153): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252389.008:5154): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252389.055:5155): pid=34528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252389.055:5156): pid=34528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667278756B7A746B6E7A6971746E756C726E7771736776747A6E756E7A726B74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252389.056:5157): pid=34528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252389.058:5158): pid=34528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252389.246:5159): pid=34528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252389.246:5160): pid=34528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252389.250:5161): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252389.250:5162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252389.365:5163): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252389.365:5164): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252389.391:5165): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252389.391:5166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252389.433:5167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252389.433:5168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252389.469:5169): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252389.469:5170): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252389.510:5171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252389.510:5172): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252389.570:5173): pid=34576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252389.570:5174): pid=34576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6764626D756C756C726F797261656471736C776A686B6A69736465656C716376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252389.571:5175): pid=34576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252389.574:5176): pid=34576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252389.748:5177): pid=34576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252389.749:5178): pid=34576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252389.753:5179): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252389.753:5180): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252389.795:5181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252389.795:5182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252389.838:5183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252389.838:5184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252389.879:5185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252389.879:5186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252389.916:5187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252389.916:5188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252389.958:5189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252389.958:5190): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252389.994:5191): pid=34619 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252389.994:5192): pid=34619 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C70696776686A7A796F6367767067796E737675726E73747A657066796A7675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252389.994:5193): pid=34619 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252390.030:5194): pid=34619 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252390.240:5195): pid=34619 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252390.240:5196): pid=34619 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252390.244:5197): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252390.244:5198): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252390.286:5199): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252390.286:5200): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252390.319:5201): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252390.319:5202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252390.448:5203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252390.448:5204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252390.510:5205): pid=34649 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252390.511:5206): pid=34649 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6777666F7A786D6C756375747665736474737866667A6C716468687278736A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252390.511:5207): pid=34649 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252390.514:5208): pid=34649 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1781252391.478:5209): auid=1002 ses=16 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252391.478:5209): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fcfd8600000 a2=36aa51 a3=0 items=0 ppid=34651 pid=34724 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252391.478:5209): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252391.666:5210): pid=34651 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/etc/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252391.707:5211): pid=34649 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252391.708:5212): pid=34649 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252391.713:5213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252391.713:5214): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252391.768:5215): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252391.768:5216): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252391.819:5217): pid=34738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252391.819:5218): pid=34738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667477646C636C64616E636175796F7967696A7766636162777367756B766371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252391.820:5219): pid=34738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252391.825:5220): pid=34738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1781252392.739:5221): auid=1002 ses=16 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252392.739:5221): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fab6fa00000 a2=36aa51 a3=0 items=0 ppid=34740 pid=34745 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252392.739:5221): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252392.920:5222): pid=34740 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/etc/target(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252392.971:5223): pid=34738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252392.971:5224): pid=34738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252392.977:5225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252392.977:5226): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252393.040:5227): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252393.040:5228): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252393.098:5229): pid=34759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252393.098:5230): pid=34759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7177656E70636B6E6F6A6B7A6D666C6A7063667668656E627A717269636D7268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252393.099:5231): pid=34759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252393.105:5232): pid=34759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1781252394.053:5233): auid=1002 ses=16 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252394.053:5233): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7ff880200000 a2=36aa51 a3=0 items=0 ppid=34761 pid=34767 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252394.053:5233): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252394.174:5234): pid=34761 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252394.216:5235): pid=34759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252394.216:5236): pid=34759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252394.221:5237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252394.221:5238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252394.322:5239): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252394.322:5240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252394.388:5241): pid=34781 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252394.389:5242): pid=34781 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7679686965716F7A777A686370777A6471666F746B6D6D70686F667768777378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252394.389:5243): pid=34781 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252394.395:5244): pid=34781 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252394.583:5245): pid=34781 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252394.584:5246): pid=34781 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252394.587:5247): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252394.587:5248): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252394.628:5249): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252394.628:5250): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252394.670:5251): pid=34797 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252394.670:5252): pid=34797 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7469626A637564657A6E766E6B757372657572726E766B6D6C6E79686F7A786D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252394.671:5253): pid=34797 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252394.672:5254): pid=34797 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252394.854:5255): pid=34797 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252394.854:5256): pid=34797 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252394.858:5257): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252394.858:5258): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252394.913:5259): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252394.914:5260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252394.956:5261): pid=34813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252394.957:5262): pid=34813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61706A746A696A6B746471726275737A7262647A696170676A79727873677866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252394.957:5263): pid=34813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252394.959:5264): pid=34813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252395.108:5265): pid=34813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252395.108:5266): pid=34813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252395.112:5267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252395.112:5268): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252395.280:5269): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252395.280:5270): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252395.342:5271): pid=34829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252395.342:5272): pid=34829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707478626874667074686E6C6977676668726F75776C6F726F7979756B727264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252395.343:5273): pid=34829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252395.346:5274): pid=34829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252395.514:5275): pid=34829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252395.515:5276): pid=34829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252395.519:5277): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252395.519:5278): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252395.707:5279): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252395.707:5280): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252395.756:5281): pid=34845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252395.756:5282): pid=34845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F6B6165726568737A716F6E62696D7474766273786E726B667276686B7672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252395.757:5283): pid=34845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252395.759:5284): pid=34845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252395.928:5285): pid=34845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252395.928:5286): pid=34845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252395.931:5287): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252395.931:5288): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252396.254:5289): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252396.254:5290): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252396.308:5291): pid=34862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252396.308:5292): pid=34862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71717A696E7377647278737372786C76617A71716A6C6F6B71677A706D797271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252396.309:5293): pid=34862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252396.311:5294): pid=34862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781252399.523:5295): pid=34864 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="dracut-config-generic-057-21.git20230214.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252400.399:5296): pid=34862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252400.400:5297): pid=34862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252400.404:5298): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252400.404:5299): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252400.532:5300): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252400.532:5301): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252400.589:5302): pid=34879 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252400.590:5303): pid=34879 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B696C6D6B61726E747868756A6F6A627671616A6A70776B7964686E6D7873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252400.590:5304): pid=34879 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252400.592:5305): pid=34879 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252400.768:5306): pid=34879 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252400.769:5307): pid=34879 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252400.774:5308): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252400.775:5309): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252400.907:5310): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252400.907:5311): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252400.936:5312): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252400.937:5313): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252400.977:5314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252400.978:5315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252401.018:5316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252401.018:5317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252401.067:5318): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252401.067:5319): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252401.125:5320): pid=34927 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252401.125:5321): pid=34927 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6167617966786568766F706776796B6C6B786F646C6B7877676A7571786F7470203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252401.126:5322): pid=34927 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252401.128:5323): pid=34927 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252401.295:5324): pid=34927 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252401.295:5325): pid=34927 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252401.298:5326): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252401.298:5327): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252401.340:5328): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252401.340:5329): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252401.371:5330): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252401.371:5331): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252401.412:5332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252401.412:5333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252401.443:5334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252401.443:5335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252401.483:5336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252401.483:5337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252401.527:5338): pid=34970 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252401.527:5339): pid=34970 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63706262686F666F696D766F6F6176766A7761646C676279647A696C71656974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252401.528:5340): pid=34970 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252401.530:5341): pid=34970 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252401.708:5342): pid=34970 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252401.708:5343): pid=34970 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252401.713:5344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252401.713:5345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252401.737:5346): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252401.737:5347): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252401.770:5348): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252401.771:5349): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252401.869:5350): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252401.869:5351): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252401.914:5352): pid=35000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252401.915:5353): pid=35000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6278726A6D797A78716D76656C686C6E716774726568656F676E797563756572203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252401.915:5354): pid=35000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252401.917:5355): pid=35000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252402.218:5356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252402.291:5357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252402.319:5358): pid=35000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252402.320:5359): pid=35000 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252403.275:5360): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252403.276:5361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252403.324:5362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252403.324:5363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252403.343:5364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252403.343:5365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252403.385:5366): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252403.386:5367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252403.407:5368): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252403.407:5369): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252403.450:5370): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252403.450:5371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252403.488:5372): pid=35054 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252403.488:5373): pid=35054 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6163627572796769656A6D65786C6D786A707764707178647A797A79627A75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252403.489:5374): pid=35054 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252403.490:5375): pid=35054 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252403.662:5376): pid=35054 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252403.662:5377): pid=35054 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252403.666:5378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252403.666:5379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252403.695:5380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252403.695:5381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252403.729:5382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252403.729:5383): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252403.771:5384): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252403.771:5385): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252403.804:5386): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252403.804:5387): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252403.845:5388): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252403.845:5389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252403.906:5390): pid=35097 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252403.906:5391): pid=35097 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79676A65776B78647762636D61676A6479697568636E62646C7762616975687A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252403.907:5392): pid=35097 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252403.910:5393): pid=35097 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252404.088:5394): pid=35097 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252404.089:5395): pid=35097 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252404.092:5396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252404.093:5397): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252404.133:5398): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252404.133:5399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252404.157:5400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252404.158:5401): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252404.291:5402): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252404.292:5403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252404.345:5404): pid=35127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252404.346:5405): pid=35127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D70707372716C6F657761776C666C6168707973736268657968797A707A6679203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252404.346:5406): pid=35127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252404.349:5407): pid=35127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252404.510:5408): pid=35127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252404.510:5409): pid=35127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252404.514:5410): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252404.514:5411): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252404.592:5412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252404.593:5413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252404.644:5414): pid=35145 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252404.644:5415): pid=35145 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C6B71796E716C7A646978676A6D75667263737569696C7A64677668686A67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252404.644:5416): pid=35145 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252404.646:5417): pid=35145 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252404.824:5418): pid=35145 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252404.824:5419): pid=35145 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252404.826:5420): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252404.827:5421): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252404.925:5422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252404.926:5423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252404.980:5424): pid=35163 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252404.981:5425): pid=35163 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A6179617A7579666C76716861787968786F75726D62747967657A6C717668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252404.981:5426): pid=35163 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252404.984:5427): pid=35163 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252405.141:5428): pid=35163 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252405.142:5429): pid=35163 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252405.146:5430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252405.146:5431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252405.213:5432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252405.213:5433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252405.269:5434): pid=35180 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252405.269:5435): pid=35180 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6F75707A78626473656D70707365696A72616B7074656F6F6A767476787469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252405.270:5436): pid=35180 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252405.273:5437): pid=35180 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252405.454:5438): pid=35180 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252405.454:5439): pid=35180 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252405.458:5440): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252405.458:5441): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252405.539:5442): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252405.540:5443): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252405.595:5444): pid=35197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252405.595:5445): pid=35197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A73656763666D77756F78667778626B64776F767264626A6E667377646A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252405.596:5446): pid=35197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252405.598:5447): pid=35197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252405.771:5448): pid=35197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252405.772:5449): pid=35197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252405.775:5450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252405.775:5451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252405.855:5452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252405.855:5453): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252405.903:5454): pid=35214 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252405.903:5455): pid=35214 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E78796B7377686269756D6172796C717864736265626766777076726D776A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252405.904:5456): pid=35214 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252405.906:5457): pid=35214 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252406.089:5458): pid=35214 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252406.089:5459): pid=35214 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252406.092:5460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252406.093:5461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252406.172:5462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252406.172:5463): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252406.225:5464): pid=35234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252406.225:5465): pid=35234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B7365656E7963767763786D61726B706B71746576707462787A786372686C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252406.227:5466): pid=35234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252406.230:5467): pid=35234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252406.346:5468): pid=35217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=35218 suid=74 rport=60198 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252406.346:5469): pid=35217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=35218 suid=74 rport=60198 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252406.403:5470): pid=35234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252406.403:5471): pid=35234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252406.406:5472): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252406.406:5473): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252406.465:5474): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252406.466:5475): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252406.527:5476): pid=35252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252406.527:5477): pid=35252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6673766D66616E6E706A6374627166627A6B657764766E65616B737069657470203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252406.528:5478): pid=35252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252406.530:5479): pid=35252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252407.699:5480): pid=35217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35218 suid=74 rport=60198 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252407.700:5481): pid=35217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252407.701:5482): pid=35217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252407.709:5483): pid=35252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252407.709:5484): pid=35252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252407.712:5485): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252407.713:5486): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252407.807:5487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252407.807:5488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252407.870:5489): pid=35270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252407.870:5490): pid=35270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A786869716F79666E756E69736177776C6666746B6A7171746E68686F767970203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252407.871:5491): pid=35270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252407.874:5492): pid=35270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252408.057:5493): pid=35270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252408.057:5494): pid=35270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252408.062:5495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252408.062:5496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252408.120:5497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252408.120:5498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252408.177:5499): pid=35288 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252408.178:5500): pid=35288 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706A7972617873797275697068766970756D63787367667676657073786E6366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252408.178:5501): pid=35288 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252408.180:5502): pid=35288 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252408.367:5503): pid=35288 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252408.368:5504): pid=35288 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252408.371:5505): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252408.371:5506): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252408.452:5507): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252408.452:5508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252408.511:5509): pid=35306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252408.511:5510): pid=35306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A766E6A6A657475746D73666769686E6269646B7276716E6A64686A697A6B6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252408.512:5511): pid=35306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252408.513:5512): pid=35306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252409.290:5513): pid=35306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252409.290:5514): pid=35306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252409.293:5515): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252409.293:5516): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252409.651:5517): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252409.651:5518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252409.701:5519): pid=35324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252409.701:5520): pid=35324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7671796263756E7779716C69766E7963786174726577716E6E6168637766746E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252409.701:5521): pid=35324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252409.703:5522): pid=35324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252413.379:5523): pid=35324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252413.379:5524): pid=35324 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252413.383:5525): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252413.383:5526): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252414.179:5527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252414.179:5528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252414.224:5529): pid=35342 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252414.225:5530): pid=35342 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7964786A77657872756B787A63736E6D626E746A626B6D626B7167636C777777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252414.225:5531): pid=35342 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252414.227:5532): pid=35342 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252415.926:5533): pid=35342 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252415.926:5534): pid=35342 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252416.878:5535): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252416.879:5536): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252416.920:5537): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252416.920:5538): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252416.961:5539): pid=35359 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252416.961:5540): pid=35359 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68616F70716B6A617A67796377796565687879736E61797A6870726C6E797463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252416.962:5541): pid=35359 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252416.963:5542): pid=35359 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.097:5543): pid=35359 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252417.098:5544): pid=35359 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.102:5545): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252417.102:5546): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252417.173:5547): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252417.174:5548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252417.222:5549): pid=35376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252417.222:5550): pid=35376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F65757170726E7165746C7971767270706276706F68666B66656670726D696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252417.222:5551): pid=35376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252417.225:5552): pid=35376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.375:5553): pid=35376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252417.375:5554): pid=35376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.378:5555): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252417.378:5556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252417.476:5557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252417.476:5558): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252417.522:5559): pid=35393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252417.522:5560): pid=35393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62686E68646B6773797A6A7663656E737A7072686864626D7275617169697670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252417.523:5561): pid=35393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252417.525:5562): pid=35393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.675:5563): pid=35393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252417.675:5564): pid=35393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.678:5565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252417.678:5566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252417.765:5567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252417.765:5568): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252417.825:5569): pid=35410 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252417.825:5570): pid=35410 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B787965786371636B6C6169616776617172707A6C686D706C7061757879676D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252417.826:5571): pid=35410 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252417.828:5572): pid=35410 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.986:5573): pid=35410 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252417.986:5574): pid=35410 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252417.990:5575): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252417.991:5576): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252418.112:5577): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252418.112:5578): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252418.169:5579): pid=35428 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252418.169:5580): pid=35428 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647461666A7A706A677666756C6A6F6F7361776A6961646B76666665716A7570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252418.170:5581): pid=35428 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252418.172:5582): pid=35428 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252418.458:5583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252418.481:5584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252418.505:5585): pid=35428 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252418.505:5586): pid=35428 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252418.508:5587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252418.508:5588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252418.674:5589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252418.674:5590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252418.736:5591): pid=35448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252418.737:5592): pid=35448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63636F72666A6578796470796565746F726E707A687279677866676A696C7568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252418.737:5593): pid=35448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252418.740:5594): pid=35448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252418.924:5595): pid=35448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252418.924:5596): pid=35448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252418.928:5597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252418.928:5598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252418.969:5599): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252418.970:5600): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252419.023:5601): pid=35464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252419.023:5602): pid=35464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62627775716F6269786D767A696E63656F6A636A727878726263746165757274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252419.024:5603): pid=35464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252419.025:5604): pid=35464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252419.181:5605): pid=35464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252419.181:5606): pid=35464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252419.185:5607): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252419.185:5608): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252419.329:5609): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252419.329:5610): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252419.392:5611): pid=35480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252419.393:5612): pid=35480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6570747A6B716B6E61667667666B77616761677361687166696A756179796472203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252419.393:5613): pid=35480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252419.396:5614): pid=35480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252419.528:5615): pid=35480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252419.528:5616): pid=35480 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252419.531:5617): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252419.531:5618): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252419.661:5619): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252419.661:5620): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252419.725:5621): pid=35496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252419.725:5622): pid=35496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69706C6C636C6A6F6E677770746861657869776C6F696E797173756E6E63796C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252419.725:5623): pid=35496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252419.728:5624): pid=35496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252419.901:5625): pid=35496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252419.902:5626): pid=35496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252419.905:5627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252419.905:5628): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252420.005:5629): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252420.006:5630): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252420.051:5631): pid=35512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252420.051:5632): pid=35512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636474787962726E7A6174616970696F6F63656C6B6F6265646A777464756469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252420.051:5633): pid=35512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252420.054:5634): pid=35512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252420.227:5635): pid=35512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252420.227:5636): pid=35512 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252420.230:5637): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252420.230:5638): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252420.454:5639): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252420.454:5640): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252420.513:5641): pid=35528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252420.515:5642): pid=35528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747863706470716C7A61736B737771777172626F797968756D6A7263726B6968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252420.515:5643): pid=35528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252420.517:5644): pid=35528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252420.713:5645): pid=35528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252420.714:5646): pid=35528 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252420.717:5647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252420.718:5648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252420.785:5649): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252420.785:5650): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252420.842:5651): pid=35544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252420.843:5652): pid=35544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786A6D747067627A746A77796E7763747062636D61667573726E70766469667A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252420.843:5653): pid=35544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252420.846:5654): pid=35544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252421.030:5655): pid=35544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252421.030:5656): pid=35544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252421.035:5657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252421.035:5658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252421.141:5659): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252421.141:5660): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252421.197:5661): pid=35560 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252421.197:5662): pid=35560 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616373776D626E7776677075616B667A6277717A6A74717A6D766A6178787665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252421.198:5663): pid=35560 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252421.200:5664): pid=35560 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252421.385:5665): pid=35560 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252421.385:5666): pid=35560 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252421.388:5667): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252421.388:5668): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252421.515:5669): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252421.515:5670): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252421.571:5671): pid=35576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252421.571:5672): pid=35576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D64746B78787A7767616D6762736663667A6C6C6E7664756C717668696F666E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252421.572:5673): pid=35576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252421.575:5674): pid=35576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252421.763:5675): pid=35576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252421.763:5676): pid=35576 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252421.767:5677): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252421.767:5678): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252421.840:5679): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252421.840:5680): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252421.898:5681): pid=35592 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252421.899:5682): pid=35592 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A63776269766268637672667A6D70646F687671786D7762686765747A79746C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252421.899:5683): pid=35592 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252421.901:5684): pid=35592 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252422.073:5685): pid=35592 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252422.074:5686): pid=35592 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252422.077:5687): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252422.077:5688): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252422.207:5689): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252422.208:5690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252422.258:5691): pid=35608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252422.259:5692): pid=35608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7877797677726979666562746F626E7863746A767366786E747A62677A7864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252422.259:5693): pid=35608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252422.262:5694): pid=35608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252422.439:5695): pid=35608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252422.440:5696): pid=35608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252422.444:5697): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252422.444:5698): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252422.573:5699): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252422.573:5700): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252422.635:5701): pid=35624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252422.635:5702): pid=35624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A7774686373696F796C76667563627074706470756771616A686E747A756E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252422.636:5703): pid=35624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252422.639:5704): pid=35624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252422.809:5705): pid=35624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252422.809:5706): pid=35624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252422.812:5707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252422.812:5708): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252422.884:5709): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252422.884:5710): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252422.941:5711): pid=35640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252422.942:5712): pid=35640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6961656C6B616976686579787067796575697078656675767366756B6A6A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252422.942:5713): pid=35640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252422.945:5714): pid=35640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252423.119:5715): pid=35640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252423.119:5716): pid=35640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252423.123:5717): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252423.123:5718): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252423.290:5719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252423.290:5720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252423.348:5721): pid=35656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252423.348:5722): pid=35656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667072777669626F79716F7670667172647A7A686A67636C70776A6C69627367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252423.349:5723): pid=35656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252423.351:5724): pid=35656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252423.529:5725): pid=35656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252423.530:5726): pid=35656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252423.533:5727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252423.534:5728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252423.605:5729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252423.605:5730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252423.667:5731): pid=35672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252423.668:5732): pid=35672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A686876616166636175616C66666B78696B766D616F716B7662766F71747672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252423.668:5733): pid=35672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252423.671:5734): pid=35672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252423.857:5735): pid=35672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252423.857:5736): pid=35672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252423.861:5737): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252423.861:5738): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252423.921:5739): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252423.921:5740): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252423.972:5741): pid=35688 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252423.972:5742): pid=35688 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766D7A6B79636C6E6E736175746E6A706977747A6D776B6263716968796A7263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252423.973:5743): pid=35688 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252423.976:5744): pid=35688 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252424.162:5745): pid=35688 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252424.162:5746): pid=35688 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252424.166:5747): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252424.166:5748): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252424.295:5749): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252424.295:5750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252424.349:5751): pid=35704 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252424.349:5752): pid=35704 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7364786E627A766263697A70626F716D6B72757673706D67636372786C77626A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252424.350:5753): pid=35704 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252424.352:5754): pid=35704 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252424.543:5755): pid=35704 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252424.544:5756): pid=35704 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252424.547:5757): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252424.547:5758): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252424.599:5759): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252424.599:5760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252424.660:5761): pid=35720 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252424.660:5762): pid=35720 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63636E6577686B6D6C6861716B7072666A6E72716578716E646B63616E6E6773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252424.661:5763): pid=35720 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252424.664:5764): pid=35720 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252424.838:5765): pid=35720 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252424.839:5766): pid=35720 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252424.844:5767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252424.844:5768): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252424.962:5769): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252424.962:5770): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252425.027:5771): pid=35736 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252425.027:5772): pid=35736 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65636D767376756E747862726A7A7365757678686565776E616E736A76756B67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252425.028:5773): pid=35736 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252425.030:5774): pid=35736 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252425.208:5775): pid=35736 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252425.209:5776): pid=35736 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252425.212:5777): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252425.212:5778): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252425.269:5779): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252425.269:5780): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252425.325:5781): pid=35752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252425.325:5782): pid=35752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7770716766776C696E726468697166796962636E6A737977676D6F756A6277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252425.326:5783): pid=35752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252425.328:5784): pid=35752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252425.485:5785): pid=35752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252425.485:5786): pid=35752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252425.490:5787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252425.490:5788): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252425.615:5789): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252425.615:5790): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252425.669:5791): pid=35768 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252425.669:5792): pid=35768 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696375677470786B656D71706A75646F716968786B6C676C796169626D727A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252425.670:5793): pid=35768 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252425.672:5794): pid=35768 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252425.850:5795): pid=35768 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252425.850:5796): pid=35768 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252425.854:5797): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252425.854:5798): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252425.996:5799): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252425.996:5800): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252426.047:5801): pid=35784 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252426.047:5802): pid=35784 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7663777A6B6E6D6A64656E6A6162687262716375696C65797065636168617372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252426.047:5803): pid=35784 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252426.049:5804): pid=35784 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252426.190:5805): pid=35784 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252426.191:5806): pid=35784 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252426.193:5807): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252426.193:5808): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252426.248:5809): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252426.248:5810): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252426.303:5811): pid=35800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252426.303:5812): pid=35800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E7879726170686E72767071666678786474796B6E76717564767778617A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252426.304:5813): pid=35800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252426.306:5814): pid=35800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252426.481:5815): pid=35800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252426.481:5816): pid=35800 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252426.485:5817): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252426.485:5818): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252426.606:5819): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252426.606:5820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252426.659:5821): pid=35816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252426.659:5822): pid=35816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6364667068696E6A786F6E736E67777A796164706E64767471656F7A72756F62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252426.660:5823): pid=35816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252426.662:5824): pid=35816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_GROUP msg=audit(1781252426.844:5825): pid=35819 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=GRP_MGMT msg=audit(1781252426.849:5826): pid=35819 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1781252426.886:5827): pid=35816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252426.887:5828): pid=35816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252426.890:5829): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252426.890:5830): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252426.999:5831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252426.999:5832): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252427.053:5833): pid=35838 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252427.054:5834): pid=35838 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6674716577677A6C6D6363646F766F6E68717767797770766E756C6566716270203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252427.054:5835): pid=35838 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252427.057:5836): pid=35838 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_USER msg=audit(1781252427.274:5837): pid=35842 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MGMT msg=audit(1781252427.317:5838): pid=35842 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1781252427.344:5839): pid=35838 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252427.344:5840): pid=35838 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252427.347:5841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252427.347:5842): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252427.435:5843): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252427.435:5844): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252427.498:5845): pid=35862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252427.498:5846): pid=35862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6478616A6A7A6876797A6877767864626A62716D6876636768746A6B6C626B72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252427.499:5847): pid=35862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252427.501:5848): pid=35862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1781252427.829:5849): bool=logrotate_read_inside_containers val=1 old_val=0 auid=1002 ses=16AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252427.829:5849): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffc2b4e04ee a2=2 a3=0 items=0 ppid=35862 pid=35864 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252427.829:5849): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1781252428.378:5850): pid=35862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252428.379:5851): pid=35862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252428.383:5852): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252428.383:5853): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252428.498:5854): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252428.498:5855): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252428.569:5856): pid=35883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252428.570:5857): pid=35883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A7967736C766F78717871776664777865667373777370786974756B696D77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252428.571:5858): pid=35883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252428.578:5859): pid=35883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252428.745:5860): pid=35883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252428.746:5861): pid=35883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252428.751:5862): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252428.751:5863): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252428.815:5864): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252428.816:5865): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252428.873:5866): pid=35899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252428.873:5867): pid=35899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6266797A676C63706275666F61766E7272657267776A70686A65666D73627568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252428.874:5868): pid=35899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252428.876:5869): pid=35899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252429.076:5870): pid=35899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252429.076:5871): pid=35899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252429.080:5872): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252429.080:5873): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252429.326:5874): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252429.326:5875): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252429.374:5876): pid=35915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252429.374:5877): pid=35915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7972796272736C71616877687065676B67736C6F65787672726D796162626C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252429.375:5878): pid=35915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252429.377:5879): pid=35915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252429.546:5880): pid=35915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252429.547:5881): pid=35915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252429.549:5882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252429.550:5883): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252429.621:5884): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252429.622:5885): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252429.669:5886): pid=35931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252429.670:5887): pid=35931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7966736C73797765766E66776866797A696C72777172796C78716366697679203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252429.670:5888): pid=35931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252429.673:5889): pid=35931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252429.857:5890): pid=35931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252429.857:5891): pid=35931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252429.861:5892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252429.861:5893): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252429.999:5894): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252429.999:5895): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252430.028:5896): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252430.028:5897): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252430.069:5898): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252430.070:5899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252430.106:5900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252430.106:5901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252430.147:5902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252430.147:5903): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252430.205:5904): pid=35980 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252430.206:5905): pid=35980 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C746A7068796F61776F78646E67746C626B65707971776E7562776865756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252430.206:5906): pid=35980 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252430.209:5907): pid=35980 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252430.380:5908): pid=35980 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252430.381:5909): pid=35980 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252430.385:5910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252430.385:5911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252430.427:5912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252430.427:5913): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252430.464:5914): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252430.464:5915): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252430.505:5916): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252430.505:5917): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252430.535:5918): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252430.535:5919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252430.577:5920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252430.577:5921): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252430.643:5922): pid=36023 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252430.644:5923): pid=36023 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7474767A7A786D61626E666A6F7A76687279737878666D6D746E65696F736573203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252430.644:5924): pid=36023 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252430.647:5925): pid=36023 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252430.815:5926): pid=36023 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252430.816:5927): pid=36023 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252430.819:5928): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252430.819:5929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252430.861:5930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252430.861:5931): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252430.883:5932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252430.883:5933): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252430.964:5934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252430.964:5935): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252431.063:5936): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252431.063:5937): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252431.083:5938): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252431.083:5939): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252431.110:5940): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252431.110:5941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252431.152:5942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252431.152:5943): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252431.201:5944): pid=36085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252431.201:5945): pid=36085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74636B6A67657068756874777169736C6B6676637566777A7170637074747667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252431.202:5946): pid=36085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252431.205:5947): pid=36085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252431.363:5948): pid=36085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252431.363:5949): pid=36085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252431.367:5950): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252431.367:5951): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252431.408:5952): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252431.408:5953): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252431.443:5954): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252431.443:5955): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252431.485:5956): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252431.485:5957): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252431.518:5958): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252431.518:5959): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252431.560:5960): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252431.560:5961): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252431.620:5962): pid=36128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252431.621:5963): pid=36128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697772776F66616C7265716C76746B72756877796F6E6B697172666167726665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252431.622:5964): pid=36128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252431.625:5965): pid=36128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252431.806:5966): pid=36128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252431.807:5967): pid=36128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252431.811:5968): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252431.811:5969): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252431.851:5970): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252431.852:5971): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252431.880:5972): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252431.881:5973): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252431.983:5974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252431.984:5975): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252432.037:5976): pid=36158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252432.037:5977): pid=36158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C76786E6B6F6E73656C7870667A666D70646375657A697A70736673756B72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252432.037:5978): pid=36158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252432.039:5979): pid=36158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252432.543:5980): prog-id=175 op=LOAD
type=BPF msg=audit(1781252432.543:5981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.543:5982): prog-id=176 op=LOAD
type=BPF msg=audit(1781252432.543:5983): prog-id=177 op=LOAD
type=BPF msg=audit(1781252432.543:5984): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.543:5985): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.546:5986): prog-id=178 op=LOAD
type=BPF msg=audit(1781252432.546:5987): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.546:5988): prog-id=179 op=LOAD
type=BPF msg=audit(1781252432.546:5989): prog-id=180 op=LOAD
type=BPF msg=audit(1781252432.546:5990): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.546:5991): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.547:5992): prog-id=181 op=LOAD
type=BPF msg=audit(1781252432.547:5993): prog-id=182 op=LOAD
type=BPF msg=audit(1781252432.547:5994): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.547:5995): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.548:5996): prog-id=183 op=LOAD
type=BPF msg=audit(1781252432.548:5997): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252432.549:5998): prog-id=184 op=LOAD
type=BPF msg=audit(1781252432.549:5999): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781252432.585:6000): pid=36158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252432.585:6001): pid=36158 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252432.590:6002): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252432.590:6003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252432.805:6004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252432.805:6005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252432.872:6006): pid=36212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252432.873:6007): pid=36212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A776B776E6C69656F67617065756B696D786F706770717064676D6361646363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252432.873:6008): pid=36212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252432.876:6009): pid=36212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252433.021:6010): pid=36212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252433.021:6011): pid=36212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252433.023:6012): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252433.024:6013): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252433.124:6014): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252433.124:6015): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252433.171:6016): pid=36228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252433.171:6017): pid=36228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D656867697A6D78677566686A7A6778626F7665616367676E666E637273696F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252433.172:6018): pid=36228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252433.176:6019): pid=36228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252433.355:6020): pid=36228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252433.355:6021): pid=36228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252433.359:6022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252433.359:6023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252433.471:6024): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252433.472:6025): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252433.534:6026): pid=36244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252433.534:6027): pid=36244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A727A6D78666F63717175626969656E636A726F79696E7A7A756B6A6C6D776F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252433.535:6028): pid=36244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252433.538:6029): pid=36244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252433.857:6030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252433.865:6031): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252433.867:6032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252433.867:6033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252433.869:6034): prog-id=185 op=LOAD
type=BPF msg=audit(1781252433.869:6035): prog-id=186 op=LOAD
type=BPF msg=audit(1781252433.869:6036): prog-id=187 op=LOAD
type=BPF msg=audit(1781252433.869:6037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252433.869:6038): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252433.908:6039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252433.945:6040): pid=36244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252433.946:6041): pid=36244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252433.950:6042): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252433.950:6043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252434.226:6044): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252434.226:6045): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252434.278:6046): pid=36268 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252434.279:6047): pid=36268 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A736C7062707764747065616865756A6B716469666D666D6B686A736B6269203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252434.280:6048): pid=36268 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252434.284:6049): pid=36268 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252434.482:6050): pid=36268 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252434.482:6051): pid=36268 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252434.486:6052): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252434.486:6053): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252434.533:6054): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252434.533:6055): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252434.591:6056): pid=36284 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252434.591:6057): pid=36284 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C6378626B71696C7063667372746D6B616467636A6E6F6C696F626E6F6D68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252434.592:6058): pid=36284 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252434.594:6059): pid=36284 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252434.783:6060): pid=36284 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252434.783:6061): pid=36284 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252434.786:6062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252434.786:6063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252434.983:6064): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252434.983:6065): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252435.044:6066): pid=36300 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252435.044:6067): pid=36300 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6A787871757A766C736B79676569707673766978686B687669617364617A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252435.045:6068): pid=36300 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252435.047:6069): pid=36300 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1781252435.978:6070): auid=1002 ses=16 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252435.978:6070): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fc134800000 a2=36aa51 a3=0 items=0 ppid=36302 pid=36307 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252435.978:6070): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252436.171:6071): pid=36302 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/rabbitmq(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252436.198:6072): pid=36300 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252436.198:6073): pid=36300 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252436.204:6074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252436.204:6075): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252436.383:6076): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252436.383:6077): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252436.438:6078): pid=36321 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252436.438:6079): pid=36321 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A73716E736D6B786E7A7A6D7277736C62667976777174666E7A79626361666B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252436.439:6080): pid=36321 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252436.445:6081): pid=36321 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252436.648:6082): pid=36321 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252436.648:6083): pid=36321 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252436.651:6084): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252436.651:6085): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252436.725:6086): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252436.725:6087): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252436.785:6088): pid=36337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252436.785:6089): pid=36337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7769786B6B6674666863766665796F69786161626E69656A686D726979796A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252436.786:6090): pid=36337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252436.789:6091): pid=36337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252436.968:6092): pid=36337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252436.968:6093): pid=36337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252436.971:6094): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252436.971:6095): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252437.055:6096): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252437.055:6097): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252437.107:6098): pid=36353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252437.107:6099): pid=36353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627362646E707378657068787963666D666E6B646566657873786C636969796A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252437.107:6100): pid=36353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252437.110:6101): pid=36353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252437.327:6102): pid=36353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252437.327:6103): pid=36353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252437.330:6104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252437.330:6105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252437.919:6106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252437.919:6107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252437.980:6108): pid=36371 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252437.980:6109): pid=36371 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6678667974646270766C6D656A7872627A68637367746C686D637064696A6C63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252437.981:6110): pid=36371 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252437.984:6111): pid=36371 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252441.301:6112): pid=36371 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252441.301:6113): pid=36371 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252441.305:6114): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252441.305:6115): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252441.475:6116): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252441.475:6117): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252441.518:6118): pid=36388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252441.519:6119): pid=36388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746870726A7572676A746F6278677463687677656E776765766C6E79756C716D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252441.519:6120): pid=36388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252441.521:6121): pid=36388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252441.957:6122): pid=36388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252441.957:6123): pid=36388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252441.960:6124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252441.960:6125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252442.230:6126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252442.230:6127): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252442.273:6128): pid=36449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252442.273:6129): pid=36449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677779646B6E6474676472776A7974756A666265787073756766706A79656665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252442.273:6130): pid=36449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252442.275:6131): pid=36449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252442.459:6132): pid=36449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252442.460:6133): pid=36449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252442.464:6134): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252442.464:6135): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252442.599:6136): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252442.599:6137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252442.646:6138): pid=36465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252442.646:6139): pid=36465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65797663636E687879776C6A7A7A65746E627463637075637768746265627964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252442.647:6140): pid=36465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252442.651:6141): pid=36465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252442.876:6142): pid=36465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252442.877:6143): pid=36465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252442.880:6144): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252442.880:6145): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252442.990:6146): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252442.990:6147): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252443.020:6148): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252443.020:6149): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252443.061:6150): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252443.062:6151): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252443.096:6152): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252443.096:6153): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252443.251:6154): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252443.252:6155): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252443.304:6156): pid=36525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252443.304:6157): pid=36525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68736E6B6B6E6D7077686D707A6A71666764796A747A706972677A7A71746677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252443.305:6158): pid=36525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252443.307:6159): pid=36525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252443.472:6160): pid=36525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252443.472:6161): pid=36525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252443.476:6162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252443.476:6163): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252443.517:6164): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252443.518:6165): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252443.550:6166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252443.551:6167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252443.592:6168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252443.592:6169): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252443.623:6170): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252443.623:6171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252443.665:6172): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252443.665:6173): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252443.709:6174): pid=36568 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252443.709:6175): pid=36568 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616867767163696F657569776B7465726C787972656F7A6C64796964656E7A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252443.710:6176): pid=36568 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252443.711:6177): pid=36568 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252443.853:6178): pid=36568 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252443.853:6179): pid=36568 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252443.857:6180): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252443.857:6181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252443.899:6182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252443.899:6183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252443.926:6184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252443.926:6185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252444.105:6186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252444.106:6187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252444.139:6188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252444.140:6189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252444.181:6190): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252444.181:6191): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252444.217:6192): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252444.218:6193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252444.407:6194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252444.407:6195): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252444.462:6196): pid=36630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252444.463:6197): pid=36630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F7A796F6B64636B687566617172796F6765716D6D63797269646275726F70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252444.463:6198): pid=36630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252444.465:6199): pid=36630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252444.667:6200): pid=36630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252444.667:6201): pid=36630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252444.672:6202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252444.672:6203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252444.726:6204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252444.726:6205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252444.762:6206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252444.762:6207): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252444.804:6208): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252444.804:6209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252444.836:6210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252444.836:6211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252444.878:6212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252444.878:6213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252444.940:6214): pid=36675 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252444.940:6215): pid=36675 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636E78726576686E7078666D646861636E6F657663736B6D6864776C786E6A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252444.941:6216): pid=36675 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252444.944:6217): pid=36675 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252445.135:6218): pid=36675 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252445.135:6219): pid=36675 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252445.139:6220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252445.140:6221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252445.181:6222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252445.181:6223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252445.213:6224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252445.213:6225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252445.311:6226): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252445.312:6227): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252445.366:6228): pid=36705 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252445.366:6229): pid=36705 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6676756E6963736E6B7975757A6F7272716E6E6D6B71766968617664717A7379203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252445.367:6230): pid=36705 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252445.369:6231): pid=36705 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252445.538:6232): pid=36705 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252445.538:6233): pid=36705 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252445.541:6234): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252445.541:6235): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252445.595:6236): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252445.596:6237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252445.642:6238): pid=36721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252445.643:6239): pid=36721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6172676F6E666A727569766C7677727A6E6A636F6875676C73736977656F6266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252445.644:6240): pid=36721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252445.647:6241): pid=36721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252445.811:6242): pid=36721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252445.812:6243): pid=36721 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252445.819:6244): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252445.819:6245): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252445.885:6246): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252445.885:6247): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252445.946:6248): pid=36737 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252445.946:6249): pid=36737 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6472697A7971666D6A6D66776375797378797978667269656E71636E666F7276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252445.947:6250): pid=36737 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252445.949:6251): pid=36737 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252446.132:6252): pid=36737 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252446.133:6253): pid=36737 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252446.143:6254): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252446.143:6255): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252446.204:6256): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252446.204:6257): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252446.265:6258): pid=36753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252446.265:6259): pid=36753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767066636774616A756E716473617A69666F75617777766D7067716E766E7870203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252446.266:6260): pid=36753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252446.269:6261): pid=36753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252446.434:6262): pid=36753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252446.434:6263): pid=36753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252446.437:6264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252446.437:6265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252446.765:6266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252446.765:6267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252446.793:6268): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252446.793:6269): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252446.835:6270): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252446.835:6271): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252446.865:6272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252446.866:6273): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252446.906:6274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252446.907:6275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252446.950:6276): pid=36801 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252446.950:6277): pid=36801 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656978746D7568707375767075756F6F7A6874626779676D616173646B647868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252446.951:6278): pid=36801 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252446.953:6279): pid=36801 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252447.115:6280): pid=36801 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252447.115:6281): pid=36801 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252447.119:6282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252447.119:6283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252447.153:6284): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252447.153:6285): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252447.176:6286): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252447.176:6287): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252447.218:6288): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252447.218:6289): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252447.238:6290): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252447.238:6291): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252447.280:6292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252447.280:6293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252447.324:6294): pid=36844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252447.324:6295): pid=36844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C7561777376656F6C667564796D6E646C6E7965706E6867726F6371746F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252447.324:6296): pid=36844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252447.326:6297): pid=36844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252447.463:6298): pid=36844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252447.464:6299): pid=36844 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252447.467:6300): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252447.467:6301): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252447.508:6302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252447.508:6303): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252447.538:6304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252447.538:6305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252447.639:6306): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252447.639:6307): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252447.691:6308): pid=36874 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252447.692:6309): pid=36874 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B6A6D79756570727967737A616B7A666B6F757773706369727A627569746B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252447.692:6310): pid=36874 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252447.694:6311): pid=36874 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252447.878:6312): pid=36874 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252447.879:6313): pid=36874 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252447.882:6314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252447.883:6315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252447.933:6316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252447.933:6317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252447.990:6318): pid=36890 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252447.991:6319): pid=36890 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726672646266717877747A617472726172626D6173736972766E7A6E77797674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252447.992:6320): pid=36890 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252447.994:6321): pid=36890 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252448.165:6322): pid=36890 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252448.165:6323): pid=36890 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252448.169:6324): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252448.170:6325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252448.255:6326): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252448.255:6327): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252448.314:6328): pid=36906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252448.315:6329): pid=36906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6170637371696A6E686A717665617163626B777A7172796C67746C666D6F767A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252448.315:6330): pid=36906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252448.317:6331): pid=36906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252448.501:6332): pid=36906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252448.501:6333): pid=36906 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252448.505:6334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252448.505:6335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252448.596:6336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252448.596:6337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252448.621:6338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252448.621:6339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252448.664:6340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252448.664:6341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252448.698:6342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252448.698:6343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252448.740:6344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252448.740:6345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252448.794:6346): pid=36954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252448.795:6347): pid=36954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F67726E77756862796F69726F75646376706E76766175707A706A6361677376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252448.795:6348): pid=36954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252448.796:6349): pid=36954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252448.929:6350): pid=36954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252448.929:6351): pid=36954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252448.933:6352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252448.933:6353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252448.974:6354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252448.974:6355): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252449.007:6356): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252449.007:6357): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252449.049:6358): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252449.049:6359): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252449.080:6360): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252449.081:6361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252449.122:6362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252449.122:6363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252449.163:6364): pid=36997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252449.163:6365): pid=36997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617677667577616C7079786173716B67646177656A7962696A65616879696A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252449.164:6366): pid=36997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252449.166:6367): pid=36997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252449.321:6368): pid=36997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252449.321:6369): pid=36997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252449.325:6370): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252449.325:6371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252449.367:6372): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252449.367:6373): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252449.393:6374): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252449.393:6375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252449.492:6376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252449.493:6377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252449.550:6378): pid=37027 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252449.551:6379): pid=37027 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D646D6D6878696B78697269616F757A716D646F727571687978796178666C74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252449.552:6380): pid=37027 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252449.554:6381): pid=37027 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252449.695:6382): pid=37027 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252449.696:6383): pid=37027 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252449.700:6384): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252449.700:6385): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252449.861:6386): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252449.861:6387): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252449.915:6388): pid=37043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252449.915:6389): pid=37043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73636C7463656366656F726B73676D7464716A6F6575776D7275656D73776B6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252449.916:6390): pid=37043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252449.919:6391): pid=37043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252450.103:6392): pid=37043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252450.103:6393): pid=37043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252450.107:6394): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252450.107:6395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252450.461:6396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252450.461:6397): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252450.520:6398): pid=37059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252450.521:6399): pid=37059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7361716D776B6B77666571757A61727267657A6B6766737A6B71796C6A696473203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252450.522:6400): pid=37059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252450.524:6401): pid=37059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252452.425:6402): pid=37063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=37064 suid=74 rport=40238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252452.425:6403): pid=37063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=37064 suid=74 rport=40238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252453.565:6404): pid=37063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=37064 suid=74 rport=40238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1781252453.566:6405): pid=37063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252453.566:6406): pid=37063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252453.783:6407): pid=37059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252453.784:6408): pid=37059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252453.788:6409): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252453.788:6410): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252454.272:6411): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252454.272:6412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252454.297:6413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252454.297:6414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252454.337:6415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252454.337:6416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252454.368:6417): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252454.368:6418): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252454.444:6419): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252454.444:6420): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252454.510:6421): pid=37110 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252454.511:6422): pid=37110 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79636B6872667062796875697463747671796A7574626B65736C696A6E637A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252454.511:6423): pid=37110 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252454.514:6424): pid=37110 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252454.740:6425): pid=37110 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252454.740:6426): pid=37110 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252454.744:6427): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252454.744:6428): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252454.785:6429): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252454.785:6430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252454.816:6431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252454.816:6432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252454.857:6433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252454.858:6434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252454.885:6435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252454.885:6436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252454.926:6437): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252454.926:6438): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252454.985:6439): pid=37155 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252454.985:6440): pid=37155 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7871757278616F727A6168666564786975626364686E61646E73716272726E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252454.986:6441): pid=37155 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252454.988:6442): pid=37155 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252455.194:6443): pid=37155 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252455.195:6444): pid=37155 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252455.198:6445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252455.198:6446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252455.240:6447): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252455.240:6448): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252455.270:6449): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252455.270:6450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252455.749:6451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252455.749:6452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252455.803:6453): pid=37186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252455.803:6454): pid=37186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A61616B71796B686675756F69706374666B6172646577766D77637771726E6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252455.804:6455): pid=37186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252455.806:6456): pid=37186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252456.132:6457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252456.163:6458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252456.191:6459): pid=37186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252456.191:6460): pid=37186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252456.231:6461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252456.231:6462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252456.363:6463): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252456.363:6464): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252456.424:6465): pid=37207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252456.425:6466): pid=37207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676570657A716577726E6770756B6F7764636F7A6F797768767A646D7270726C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252456.425:6467): pid=37207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252456.428:6468): pid=37207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252456.596:6469): pid=37207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252456.596:6470): pid=37207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252456.599:6471): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252456.599:6472): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252456.656:6473): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252456.656:6474): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252456.706:6475): pid=37223 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252456.707:6476): pid=37223 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66686967737465716677766764697569796C75626877686F736961627A776B74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252456.707:6477): pid=37223 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252456.710:6478): pid=37223 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252456.887:6479): pid=37223 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252456.887:6480): pid=37223 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252456.891:6481): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252456.891:6482): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252456.940:6483): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252456.940:6484): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252456.989:6485): pid=37239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252456.989:6486): pid=37239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7065797179637A7A65706779736964777864656C7265637174746C6D62677173203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252456.989:6487): pid=37239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252456.991:6488): pid=37239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252457.168:6489): pid=37239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252457.168:6490): pid=37239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252457.739:6491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252457.739:6492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252460.697:6493): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252460.697:6494): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252460.736:6495): pid=37255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252460.736:6496): pid=37255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A78746C7370616E79676669747161776A7772647976777367726D676B75636D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252460.737:6497): pid=37255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252460.739:6498): pid=37255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252460.897:6499): pid=37255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252460.898:6500): pid=37255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252463.730:6501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252463.730:6502): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252463.730:6503): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252463.730:6504): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252465.170:6505): pid=37271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252465.170:6506): pid=37271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E7774686375657A66786D656867647466617071746C6C6A7575796E6B7369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252465.170:6507): pid=37271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252465.172:6508): pid=37271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252465.320:6509): pid=37271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252465.320:6510): pid=37271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252465.323:6511): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252465.323:6512): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252465.369:6513): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252465.369:6514): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252465.406:6515): pid=37287 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252465.406:6516): pid=37287 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7173716E7A616B736E667773796F6F68666B6C696671746270746567616D7564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252465.406:6517): pid=37287 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252465.407:6518): pid=37287 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252465.546:6519): pid=37287 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252465.546:6520): pid=37287 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252465.550:6521): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252465.550:6522): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252465.791:6523): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252465.791:6524): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252465.841:6525): pid=37303 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252465.841:6526): pid=37303 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B6F717861727A6664727271777470666266726C6C6C6A707571656762696D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252465.842:6527): pid=37303 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252465.844:6528): pid=37303 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252466.052:6529): pid=37303 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252466.052:6530): pid=37303 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252466.056:6531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252466.056:6532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252466.478:6533): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252466.478:6534): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252466.527:6535): pid=37319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252466.528:6536): pid=37319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72627A7A766566627873716B706A7163626F716376697062657A696475657071203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252466.528:6537): pid=37319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252466.530:6538): pid=37319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252466.724:6539): pid=37319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252466.725:6540): pid=37319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252466.728:6541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252466.728:6542): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252467.539:6543): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252467.539:6544): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252467.603:6545): pid=37337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252467.603:6546): pid=37337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69627872696F7774736E6964666F686C6863796F7463656A77616E6471776F73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252467.605:6547): pid=37337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252467.608:6548): pid=37337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252467.850:6549): pid=37337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252467.850:6550): pid=37337 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252467.854:6551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252467.854:6552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252468.055:6553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252468.055:6554): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252468.118:6555): pid=37355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252468.119:6556): pid=37355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696571746868746573716B76636175726E7366717365616471786E6C71747A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252468.120:6557): pid=37355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252468.124:6558): pid=37355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252471.347:6559): pid=37355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252471.347:6560): pid=37355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252471.352:6561): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252471.352:6562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252471.765:6563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252471.765:6564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252471.795:6565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252471.795:6566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252471.836:6567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252471.837:6568): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252471.875:6569): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252471.875:6570): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252472.056:6571): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252472.056:6572): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252472.115:6573): pid=37404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252472.116:6574): pid=37404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A6273707A697778666C72666164717574636A626474736C6A696A6C7A7870203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252472.116:6575): pid=37404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252472.118:6576): pid=37404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252472.311:6577): pid=37404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252472.312:6578): pid=37404 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252472.316:6579): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252472.316:6580): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252472.357:6581): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252472.357:6582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252472.396:6583): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252472.397:6584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252472.438:6585): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252472.438:6586): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252472.469:6587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252472.469:6588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252472.510:6589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252472.511:6590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252472.568:6591): pid=37449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252472.568:6592): pid=37449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E7168736C6B7978636775627A6D716F6B6E6C6477786A6D65737762707573203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252472.569:6593): pid=37449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252472.571:6594): pid=37449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252472.741:6595): pid=37449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252472.741:6596): pid=37449 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252472.744:6597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252472.744:6598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252472.786:6599): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252472.786:6600): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252472.818:6601): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252472.818:6602): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252473.205:6603): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252473.205:6604): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252473.265:6605): pid=37479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252473.266:6606): pid=37479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A777A73757075657262666771796A7371736C6E6B7A6966736F6A62686578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252473.266:6607): pid=37479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252473.268:6608): pid=37479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252473.578:6609): pid=37479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252473.578:6610): pid=37479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252473.581:6611): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252473.581:6612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252473.687:6613): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252473.687:6614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252473.747:6615): pid=37497 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252473.747:6616): pid=37497 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A70796C6E706A767462786D62646C636E697561676F69706E6A746E786963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252473.748:6617): pid=37497 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252473.751:6618): pid=37497 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252474.041:6619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252474.044:6620): prog-id=188 op=LOAD
type=BPF msg=audit(1781252474.050:6621): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252474.098:6622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252474.118:6623): pid=37497 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252474.118:6624): pid=37497 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252474.121:6625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252474.122:6626): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252474.351:6627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252474.351:6628): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252474.377:6629): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252474.378:6630): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252474.419:6631): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252474.419:6632): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252474.456:6633): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252474.456:6634): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252474.497:6635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252474.498:6636): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252474.552:6637): pid=37553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252474.552:6638): pid=37553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A71667072647271786C6C716A7177796B696C756978717A6268637372667771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252474.553:6639): pid=37553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252474.556:6640): pid=37553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252474.729:6641): pid=37553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252474.730:6642): pid=37553 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252474.735:6643): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252474.736:6644): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252474.779:6645): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252474.779:6646): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252474.831:6647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252474.831:6648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252474.874:6649): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252474.874:6650): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252474.907:6651): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252474.907:6652): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252474.949:6653): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252474.949:6654): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252475.008:6655): pid=37596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252475.008:6656): pid=37596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C6B686B777470686B6264616962697765766E746968786F6E667566657076203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252475.008:6657): pid=37596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252475.010:6658): pid=37596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252475.165:6659): pid=37596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252475.165:6660): pid=37596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252475.169:6661): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252475.169:6662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252475.210:6663): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252475.211:6664): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252475.242:6665): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252475.242:6666): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252475.326:6667): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252475.326:6668): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252475.394:6669): pid=37626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252475.395:6670): pid=37626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6377646C6B6D7273676367737A6C736963786A7378796A737A787770677A6D6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252475.395:6671): pid=37626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252475.399:6672): pid=37626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252475.911:6673): prog-id=189 op=LOAD
type=BPF msg=audit(1781252475.911:6674): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.911:6675): prog-id=190 op=LOAD
type=BPF msg=audit(1781252475.911:6676): prog-id=191 op=LOAD
type=BPF msg=audit(1781252475.911:6677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.911:6678): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.913:6679): prog-id=192 op=LOAD
type=BPF msg=audit(1781252475.914:6680): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.914:6681): prog-id=193 op=LOAD
type=BPF msg=audit(1781252475.914:6682): prog-id=194 op=LOAD
type=BPF msg=audit(1781252475.914:6683): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.914:6684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.915:6685): prog-id=195 op=LOAD
type=BPF msg=audit(1781252475.915:6686): prog-id=196 op=LOAD
type=BPF msg=audit(1781252475.915:6687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.915:6688): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.916:6689): prog-id=197 op=LOAD
type=BPF msg=audit(1781252475.916:6690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252475.917:6691): prog-id=198 op=LOAD
type=BPF msg=audit(1781252475.917:6692): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.135:6693): prog-id=199 op=LOAD
type=BPF msg=audit(1781252476.135:6694): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.135:6695): prog-id=200 op=LOAD
type=BPF msg=audit(1781252476.136:6696): prog-id=201 op=LOAD
type=BPF msg=audit(1781252476.136:6697): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.136:6698): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.138:6699): prog-id=202 op=LOAD
type=BPF msg=audit(1781252476.138:6700): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.138:6701): prog-id=203 op=LOAD
type=BPF msg=audit(1781252476.138:6702): prog-id=204 op=LOAD
type=BPF msg=audit(1781252476.138:6703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.138:6704): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.140:6705): prog-id=205 op=LOAD
type=BPF msg=audit(1781252476.140:6706): prog-id=206 op=LOAD
type=BPF msg=audit(1781252476.140:6707): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.140:6708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.141:6709): prog-id=207 op=LOAD
type=BPF msg=audit(1781252476.141:6710): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252476.142:6711): prog-id=208 op=LOAD
type=BPF msg=audit(1781252476.142:6712): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252476.169:6713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252476.169:6714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252476.201:6715): pid=37626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252476.201:6716): pid=37626 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252476.205:6717): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252476.205:6718): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252476.398:6719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252476.398:6720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252476.461:6721): pid=37718 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252476.462:6722): pid=37718 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6563766B617463657A6D74646E75646E6162677567766F706763656F6D73727A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252476.463:6723): pid=37718 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252476.466:6724): pid=37718 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252476.639:6725): pid=37718 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252476.640:6726): pid=37718 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252476.644:6727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252476.644:6728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252476.735:6729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252476.735:6730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252476.792:6731): pid=37735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252476.792:6732): pid=37735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74757A62616A617664756B687667766D796D7874726B706F6F68666769656877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252476.793:6733): pid=37735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252476.796:6734): pid=37735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252480.784:6735): pid=37740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=37740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252481.000:6736): pid=37739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=37740 suid=74 rport=55508 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252481.000:6737): pid=37739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=37740 suid=74 rport=55508 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252482.566:6738): pid=37739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252486.993:6739): pid=37735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252486.993:6740): pid=37735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252486.996:6741): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252486.997:6742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252487.094:6743): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252487.094:6744): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252487.150:6745): pid=37755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252487.150:6746): pid=37755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75787763617A7365656176696D65636677736575786D74657972657876636977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252487.150:6747): pid=37755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252487.153:6748): pid=37755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252487.320:6749): pid=37755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252487.320:6750): pid=37755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252487.324:6751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252487.324:6752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252487.430:6753): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252487.430:6754): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252487.468:6755): pid=37772 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252487.468:6756): pid=37772 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7674786A657075706B696D6274636C6D7967786B65776A6270667161697A7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252487.469:6757): pid=37772 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252487.471:6758): pid=37772 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252487.658:6759): pid=37772 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252487.658:6760): pid=37772 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252487.662:6761): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252487.662:6762): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252487.896:6763): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252487.896:6764): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252487.942:6765): pid=37789 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252487.942:6766): pid=37789 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61787163616866786276626269716A7362716E7A6D766361756F7A6475627264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252487.942:6767): pid=37789 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252487.944:6768): pid=37789 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252488.093:6769): prog-id=209 op=LOAD
type=BPF msg=audit(1781252488.093:6770): prog-id=210 op=LOAD
type=BPF msg=audit(1781252488.094:6771): prog-id=211 op=LOAD
type=SERVICE_START msg=audit(1781252488.156:6772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252488.198:6773): pid=37789 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252488.198:6774): pid=37789 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252488.203:6775): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252488.203:6776): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252488.852:6777): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252488.852:6778): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252488.906:6779): pid=37809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252488.906:6780): pid=37809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7672646B696968617A757474667074676D6B6663637464636578796168706A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252488.907:6781): pid=37809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252488.911:6782): pid=37809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252489.064:6783): pid=37809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252489.064:6784): pid=37809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252489.068:6785): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252489.068:6786): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252489.233:6787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252489.233:6788): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252489.295:6789): pid=37826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252489.295:6790): pid=37826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C617966776F6E746173727875717172746A64796E626775746262667A667276203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252489.296:6791): pid=37826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252489.299:6792): pid=37826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252489.488:6793): pid=37826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252489.489:6794): pid=37826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252489.492:6795): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252489.492:6796): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252489.878:6797): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252489.878:6798): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252489.943:6799): pid=37843 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252489.943:6800): pid=37843 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62716779696A6763766B7468727A66646C737A6166627977717276776E68626F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252489.944:6801): pid=37843 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252489.947:6802): pid=37843 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252490.130:6803): pid=37843 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252490.131:6804): pid=37843 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252490.135:6805): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252490.135:6806): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252490.213:6807): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252490.213:6808): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252490.322:6809): pid=37859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252490.322:6810): pid=37859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686871706A64676D6C6B646B63647863666E66716D78677A716F77677572646E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252490.323:6811): pid=37859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252490.325:6812): pid=37859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252490.509:6813): pid=37859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252490.509:6814): pid=37859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252490.513:6815): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252490.513:6816): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252514.819:6817): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252514.819:6818): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252514.875:6819): pid=37875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252514.876:6820): pid=37875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A79667573706B636E786B70696A62756D68726B786D7A776D74637A7A6A7171203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252514.876:6821): pid=37875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252514.879:6822): pid=37875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252515.057:6823): pid=37875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252515.057:6824): pid=37875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252515.061:6825): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252515.061:6826): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252515.156:6827): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252515.157:6828): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252515.218:6829): pid=37891 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252515.219:6830): pid=37891 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7562696F6D6A6E6A6C6A7866627364686C6962776F6962766964736874676B65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252515.219:6831): pid=37891 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252515.222:6832): pid=37891 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252515.439:6833): pid=37891 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252515.439:6834): pid=37891 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252515.443:6835): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252515.443:6836): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252515.568:6837): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252515.568:6838): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252515.625:6839): pid=37907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252515.625:6840): pid=37907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E69746A6D7966616A636F7073656C68726A687A6A76706361656A716D787A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252515.625:6841): pid=37907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252515.627:6842): pid=37907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252515.780:6843): pid=37907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252515.780:6844): pid=37907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252515.783:6845): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252515.783:6846): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252515.880:6847): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252515.880:6848): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252515.921:6849): pid=37923 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252515.921:6850): pid=37923 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7378797A65787A666572706B6663706E69656F6874696F796A667162657A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252515.921:6851): pid=37923 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252515.923:6852): pid=37923 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252516.087:6853): pid=37923 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252516.087:6854): pid=37923 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252516.092:6855): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252516.092:6856): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252516.216:6857): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252516.216:6858): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252516.262:6859): pid=37939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252516.262:6860): pid=37939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6876696B61666B6B73626F7A7A72727679646E6F63636E716C6D7576747766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252516.263:6861): pid=37939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252516.265:6862): pid=37939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252516.432:6863): pid=37939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252516.433:6864): pid=37939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252516.437:6865): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252516.437:6866): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252516.546:6867): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252516.546:6868): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252516.611:6869): pid=37955 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252516.612:6870): pid=37955 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746967656665627663776B6B706B646B6C6764746C6964637A706C6676676775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252516.612:6871): pid=37955 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252516.615:6872): pid=37955 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1781252517.783:6873): auid=1002 ses=16 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1781252517.783:6873): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f9a5aa00000 a2=36aa51 a3=0 items=0 ppid=37957 pid=38011 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252517.783:6873): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1781252517.911:6874): pid=37957 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/container-config-scripts(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781252517.951:6875): pid=37955 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252517.951:6876): pid=37955 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252517.955:6877): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252517.955:6878): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252518.126:6879): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252518.127:6880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252518.189:6881): pid=38025 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252518.190:6882): pid=38025 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68746E7A7873666E627A6B6A697464726766677262717977696B64687A756B64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252518.191:6883): pid=38025 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252518.199:6884): pid=38025 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252518.218:6885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252518.225:6886): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252518.225:6887): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252518.225:6888): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781252518.346:6889): pid=38025 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252518.347:6890): pid=38025 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252518.352:6891): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252518.352:6892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252518.485:6893): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252518.485:6894): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252518.544:6895): pid=38044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252518.545:6896): pid=38044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61736577787277726562686B706A767574696968696A706D7A73616467617975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252518.545:6897): pid=38044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252518.548:6898): pid=38044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252518.747:6899): pid=38044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252518.747:6900): pid=38044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252518.751:6901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252518.751:6902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252518.957:6903): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252518.957:6904): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252518.991:6905): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252518.991:6906): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252519.033:6907): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252519.033:6908): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252519.071:6909): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252519.071:6910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252519.112:6911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252519.112:6912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252519.176:6913): pid=38092 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252519.176:6914): pid=38092 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E62647A796970756D71706A6D78636B666462676969746F6E6A706967786A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252519.177:6915): pid=38092 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252519.179:6916): pid=38092 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252519.358:6917): pid=38092 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252519.358:6918): pid=38092 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252519.363:6919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252519.363:6920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252519.404:6921): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252519.404:6922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252519.442:6923): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252519.442:6924): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252519.483:6925): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252519.483:6926): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252519.518:6927): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252519.518:6928): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252519.560:6929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252519.560:6930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252519.628:6931): pid=38135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252519.628:6932): pid=38135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A79626F7676676F667A666D6D6769716C766666617A76696866756D797863203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252519.629:6933): pid=38135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252519.632:6934): pid=38135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252519.814:6935): pid=38135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252519.815:6936): pid=38135 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252519.819:6937): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252519.819:6938): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252519.861:6939): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252519.861:6940): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252519.889:6941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252519.889:6942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252520.205:6943): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252520.205:6944): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252520.255:6945): pid=38165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252520.255:6946): pid=38165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A637179666D626D6F6F6563766A61627164776D7869746562686D68796A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252520.256:6947): pid=38165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252520.258:6948): pid=38165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252520.480:6949): pid=38165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252520.480:6950): pid=38165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252520.484:6951): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252520.484:6952): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252520.613:6953): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252520.613:6954): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252520.667:6955): pid=38181 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252520.667:6956): pid=38181 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7768717962696E69647070646B7269656B6C6F786E6B616171756473617A6477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252520.668:6957): pid=38181 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252520.669:6958): pid=38181 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252520.861:6959): pid=38181 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252520.861:6960): pid=38181 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252520.887:6961): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252520.888:6962): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252520.966:6963): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252520.966:6964): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252521.008:6965): pid=38197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252521.008:6966): pid=38197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777369716F6C786E64677872636B786D62756A73626E756774746C746E756767203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252521.008:6967): pid=38197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252521.010:6968): pid=38197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252521.199:6969): pid=38197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252521.199:6970): pid=38197 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252521.202:6971): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252521.202:6972): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252521.407:6973): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252521.407:6974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252521.457:6975): pid=38213 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252521.457:6976): pid=38213 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6377647664646A716F7573746979796F726672766E6763626C7373797A686375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252521.458:6977): pid=38213 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252521.460:6978): pid=38213 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252521.651:6979): pid=38213 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252521.651:6980): pid=38213 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252521.654:6981): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252521.655:6982): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252532.263:6983): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252532.263:6984): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252532.316:6985): pid=38229 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252532.317:6986): pid=38229 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66756A6A78627670616A756E646F7563706362616962696B6262777879616D74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252532.317:6987): pid=38229 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252532.319:6988): pid=38229 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252532.468:6989): pid=38229 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252532.469:6990): pid=38229 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252532.471:6991): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252532.471:6992): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252534.015:6993): pid=38233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=38233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252534.110:6994): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252534.110:6995): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252534.169:6996): pid=38247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252534.169:6997): pid=38247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6579777565647670646E796F776865697161646773706963657A7A7872667A65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252534.170:6998): pid=38247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252534.173:6999): pid=38247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252534.276:7000): pid=38232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=38233 suid=74 rport=39868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252534.276:7001): pid=38232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=38233 suid=74 rport=39868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252534.837:7002): pid=38247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252534.838:7003): pid=38247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252534.841:7004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252534.841:7005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252534.957:7006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252534.957:7007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252535.000:7008): pid=38269 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252535.000:7009): pid=38269 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C61776471626F67727378676F697A66676966726C6274707570706A74706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252535.001:7010): pid=38269 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252535.003:7011): pid=38269 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252535.179:7012): pid=38269 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252535.179:7013): pid=38269 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252535.181:7014): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252535.181:7015): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252535.366:7016): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252535.366:7017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252535.407:7018): pid=38285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252535.407:7019): pid=38285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7067797261637A696A756C686A75757471697965766667646D63646C68756773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252535.407:7020): pid=38285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252535.410:7021): pid=38285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252535.425:7022): pid=38232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781252536.270:7023): prog-id=212 op=LOAD
type=BPF msg=audit(1781252536.270:7024): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.270:7025): prog-id=213 op=LOAD
type=BPF msg=audit(1781252536.270:7026): prog-id=214 op=LOAD
type=BPF msg=audit(1781252536.270:7027): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.270:7028): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.273:7029): prog-id=215 op=LOAD
type=BPF msg=audit(1781252536.273:7030): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.273:7031): prog-id=216 op=LOAD
type=BPF msg=audit(1781252536.273:7032): prog-id=217 op=LOAD
type=BPF msg=audit(1781252536.273:7033): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.273:7034): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.274:7035): prog-id=218 op=LOAD
type=BPF msg=audit(1781252536.274:7036): prog-id=219 op=LOAD
type=BPF msg=audit(1781252536.274:7037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.274:7038): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.275:7039): prog-id=220 op=LOAD
type=BPF msg=audit(1781252536.275:7040): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252536.276:7041): prog-id=221 op=LOAD
type=BPF msg=audit(1781252536.276:7042): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781252536.296:7043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252536.297:7044): prog-id=222 op=LOAD
type=BPF msg=audit(1781252536.313:7045): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252536.355:7046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252538.884:7047): pid=38232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=38233 suid=74 rport=39868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252538.885:7048): pid=38232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=38233 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252538.886:7049): pid=38232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=38232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252538.886:7050): pid=38232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252542.477:7051): pid=38285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252542.477:7052): pid=38285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252542.481:7053): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252542.481:7054): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252542.869:7055): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252542.869:7056): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252542.935:7057): pid=38355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252542.935:7058): pid=38355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717A6B61736A7973757870786A70726A656779797A7677676A6F716A68696D76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252542.936:7059): pid=38355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252542.941:7060): pid=38355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252543.504:7061): pid=38355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252543.504:7062): pid=38355 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252543.508:7063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252543.508:7064): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252544.813:7065): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252544.814:7066): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252544.869:7067): pid=38376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252544.869:7068): pid=38376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F65646B676A727A6E6E71716F6C7363616963717663636C6874776A737A6774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252544.870:7069): pid=38376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252544.872:7070): pid=38376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252545.040:7071): pid=38376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252545.040:7072): pid=38376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252545.042:7073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252545.042:7074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252545.141:7075): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252545.141:7076): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252545.189:7077): pid=38393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252545.189:7078): pid=38393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6361716C6C686475626F6B636A696B736D6B776B6366706575796D76716A7677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252545.189:7079): pid=38393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252545.192:7080): pid=38393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252545.694:7081): prog-id=223 op=LOAD
type=BPF msg=audit(1781252545.694:7082): prog-id=224 op=LOAD
type=SERVICE_START msg=audit(1781252545.770:7083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252545.838:7084): pid=38393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252545.839:7085): pid=38393 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252545.843:7086): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252545.843:7087): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252545.966:7088): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252545.966:7089): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252546.014:7090): pid=38412 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252546.014:7091): pid=38412 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F6163626F6173786C776B78757A6679757265796376656266647068667664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252546.015:7092): pid=38412 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252546.017:7093): pid=38412 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252546.620:7094): pid=38412 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252546.620:7095): pid=38412 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252546.623:7096): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252546.623:7097): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252546.807:7098): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252546.807:7099): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252546.857:7100): pid=38433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252546.857:7101): pid=38433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6174776D65786872737767656D6A7474796F6F6F667674706B76617566626B75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252546.858:7102): pid=38433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252546.861:7103): pid=38433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252548.048:7104): pid=38433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252548.048:7105): pid=38433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252548.052:7106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252548.052:7107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252548.505:7108): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252548.506:7109): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252548.559:7110): pid=38454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252548.559:7111): pid=38454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7861616277626A7A65617164776F6463716A61636C756F70697A7465617A6B66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252548.560:7112): pid=38454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252548.562:7113): pid=38454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252549.091:7114): pid=38454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252549.092:7115): pid=38454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252549.096:7116): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252549.096:7117): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252549.282:7118): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252549.282:7119): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252549.321:7120): pid=38471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252549.321:7121): pid=38471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736770657A6A78787973656771666D736A686769736B7278727767796B716376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252549.322:7122): pid=38471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252549.323:7123): pid=38471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252549.869:7124): pid=38471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252549.870:7125): pid=38471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252549.872:7126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252549.872:7127): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252550.031:7128): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252550.031:7129): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252550.094:7130): pid=38489 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252550.094:7131): pid=38489 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69736264757A6C726468717272726179797264756A7A64766A636B6266716E75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252550.095:7132): pid=38489 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252550.098:7133): pid=38489 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252552.148:7134): pid=38489 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252552.148:7135): pid=38489 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252552.151:7136): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252552.151:7137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252552.449:7138): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252552.449:7139): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252552.490:7140): pid=38518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252552.490:7141): pid=38518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B706278736B726A7773616E65636A727371687A6579726975626E6164647666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252552.491:7142): pid=38518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252552.493:7143): pid=38518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781252556.757:7144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781252557.023:7145): prog-id=225 op=LOAD
type=BPF msg=audit(1781252557.023:7146): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.023:7147): prog-id=226 op=LOAD
type=BPF msg=audit(1781252557.023:7148): prog-id=227 op=LOAD
type=BPF msg=audit(1781252557.023:7149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.023:7150): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.024:7151): prog-id=228 op=LOAD
type=BPF msg=audit(1781252557.024:7152): prog-id=229 op=LOAD
type=BPF msg=audit(1781252557.024:7153): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.024:7154): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.026:7155): prog-id=230 op=LOAD
type=BPF msg=audit(1781252557.026:7156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.026:7157): prog-id=231 op=LOAD
type=BPF msg=audit(1781252557.026:7158): prog-id=232 op=LOAD
type=BPF msg=audit(1781252557.026:7159): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.026:7160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.028:7161): prog-id=233 op=LOAD
type=BPF msg=audit(1781252557.028:7162): prog-id=234 op=LOAD
type=BPF msg=audit(1781252557.028:7163): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.028:7164): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.029:7165): prog-id=235 op=LOAD
type=BPF msg=audit(1781252557.029:7166): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252557.030:7167): prog-id=236 op=LOAD
type=BPF msg=audit(1781252557.030:7168): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781252557.293:7169): pid=38518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252557.293:7170): pid=38518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252557.299:7171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252557.299:7172): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252557.456:7173): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252557.456:7174): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252557.522:7175): pid=38614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252557.522:7176): pid=38614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B6368646A646879646A79697869776579756267756266646E6B6962666774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252557.522:7177): pid=38614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252557.527:7178): pid=38614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252558.032:7179): pid=37192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=37192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781252558.035:7180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252558.052:7181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252558.139:7182): pid=38614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252558.139:7183): pid=38614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252558.143:7184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252558.143:7185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252558.314:7186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252558.314:7187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252558.381:7188): pid=38636 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252558.382:7189): pid=38636 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6377727166797A7761726775636C6C7A726A616268677A6F6D69756B666D6972203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252558.384:7190): pid=38636 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252558.388:7191): pid=38636 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252558.904:7192): pid=38636 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252558.905:7193): pid=38636 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252558.908:7194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252558.908:7195): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252559.184:7196): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252559.184:7197): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252559.242:7198): pid=38653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252559.242:7199): pid=38653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A676D717171656C78777471706D78646A61686369796D667568766F6F716663203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252559.243:7200): pid=38653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252559.245:7201): pid=38653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252559.975:7202): prog-id=237 op=LOAD
type=BPF msg=audit(1781252559.975:7203): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.975:7204): prog-id=238 op=LOAD
type=BPF msg=audit(1781252559.976:7205): prog-id=239 op=LOAD
type=BPF msg=audit(1781252559.976:7206): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.976:7207): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.976:7208): prog-id=240 op=LOAD
type=BPF msg=audit(1781252559.977:7209): prog-id=241 op=LOAD
type=BPF msg=audit(1781252559.977:7210): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.977:7211): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.979:7212): prog-id=242 op=LOAD
type=BPF msg=audit(1781252559.979:7213): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.979:7214): prog-id=243 op=LOAD
type=BPF msg=audit(1781252559.979:7215): prog-id=244 op=LOAD
type=BPF msg=audit(1781252559.979:7216): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.979:7217): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.980:7218): prog-id=245 op=LOAD
type=BPF msg=audit(1781252559.980:7219): prog-id=246 op=LOAD
type=BPF msg=audit(1781252559.980:7220): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.980:7221): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.981:7222): prog-id=247 op=LOAD
type=BPF msg=audit(1781252559.981:7223): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252559.982:7224): prog-id=248 op=LOAD
type=BPF msg=audit(1781252559.982:7225): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781252560.008:7226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252560.018:7227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252560.117:7228): pid=38653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252560.117:7229): pid=38653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252560.122:7230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252560.122:7231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252560.264:7232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252560.264:7233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252560.323:7234): pid=38711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252560.323:7235): pid=38711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A756262766C646C6C75676166626B71697A69716F79656C7270787A62696C6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252560.325:7236): pid=38711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252560.329:7237): pid=38711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252560.510:7238): pid=38711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252560.510:7239): pid=38711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252560.515:7240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252560.515:7241): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252560.674:7242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252560.674:7243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252560.741:7244): pid=38727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252560.741:7245): pid=38727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B6B6162736473696C686A716C73677168626A66657765666B686D70627771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252560.742:7246): pid=38727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252560.745:7247): pid=38727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252561.321:7248): pid=38727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252561.321:7249): pid=38727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252561.325:7250): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252561.325:7251): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252561.479:7252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252561.479:7253): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252561.527:7254): pid=38748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252561.528:7255): pid=38748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E6B79747576787371646B786C69647668677A626D6A666761776B61786775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252561.528:7256): pid=38748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252561.530:7257): pid=38748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252562.113:7258): pid=38748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252562.113:7259): pid=38748 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252562.117:7260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252562.117:7261): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252562.398:7262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252562.398:7263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252562.435:7264): pid=38767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252562.435:7265): pid=38767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63666A6A75776B7979657670676679746A6A727975646270626A686F7369636A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252562.435:7266): pid=38767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252562.437:7267): pid=38767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252562.600:7268): pid=38767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252562.600:7269): pid=38767 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252562.603:7270): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252562.603:7271): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252562.693:7272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252562.693:7273): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252562.738:7274): pid=38783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252562.738:7275): pid=38783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F7A7963657A73796A716669746F74636C6D6B6677797579746C6773697477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252562.739:7276): pid=38783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252562.740:7277): pid=38783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252562.882:7278): pid=38783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252562.883:7279): pid=38783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252562.886:7280): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252562.886:7281): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252563.013:7282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252563.013:7283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252563.061:7284): pid=38799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252563.061:7285): pid=38799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6176757564756C63736B736D646C62786977776E676A786A7378737277656777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252563.062:7286): pid=38799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252563.064:7287): pid=38799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252563.249:7288): pid=38799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252563.250:7289): pid=38799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252563.254:7290): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252563.254:7291): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252563.512:7292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252563.512:7293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252563.556:7294): pid=38815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252563.556:7295): pid=38815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72636F7A726B62746970706A6B6966686264696F616978617A6E736E6D656A7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252563.557:7296): pid=38815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252563.559:7297): pid=38815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252564.011:7298): prog-id=249 op=LOAD
type=BPF msg=audit(1781252564.011:7299): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.011:7300): prog-id=250 op=LOAD
type=BPF msg=audit(1781252564.011:7301): prog-id=251 op=LOAD
type=BPF msg=audit(1781252564.011:7302): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.011:7303): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.012:7304): prog-id=252 op=LOAD
type=BPF msg=audit(1781252564.012:7305): prog-id=253 op=LOAD
type=BPF msg=audit(1781252564.012:7306): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.012:7307): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.014:7308): prog-id=254 op=LOAD
type=BPF msg=audit(1781252564.014:7309): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.014:7310): prog-id=255 op=LOAD
type=BPF msg=audit(1781252564.014:7311): prog-id=256 op=LOAD
type=BPF msg=audit(1781252564.014:7312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.014:7313): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.016:7314): prog-id=257 op=LOAD
type=BPF msg=audit(1781252564.016:7315): prog-id=258 op=LOAD
type=BPF msg=audit(1781252564.016:7316): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.016:7317): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.017:7318): prog-id=259 op=LOAD
type=BPF msg=audit(1781252564.017:7319): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252564.018:7320): prog-id=260 op=LOAD
type=BPF msg=audit(1781252564.018:7321): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781252564.064:7322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=certmonger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252564.094:7323): pid=38815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252564.094:7324): pid=38815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252564.099:7325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252564.099:7326): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252573.721:7327): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252573.721:7328): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252573.749:7329): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252573.749:7330): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252573.791:7331): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252573.791:7332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252573.826:7333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252573.826:7334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252573.868:7335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252573.868:7336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252573.931:7337): pid=38932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252573.931:7338): pid=38932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A76667670656E656D796B64656D636A7061636B7866696B676B7A716B6E7A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252573.932:7339): pid=38932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252573.935:7340): pid=38932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252574.104:7341): pid=38932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252574.105:7342): pid=38932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252574.110:7343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252574.110:7344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252574.152:7345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252574.152:7346): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252574.187:7347): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252574.187:7348): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252574.228:7349): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252574.228:7350): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252574.258:7351): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252574.258:7352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252574.299:7353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252574.299:7354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252574.355:7355): pid=38975 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252574.356:7356): pid=38975 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A7A6A64766A746D627A6F766D75677966617466756B6C676975666D636B65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252574.356:7357): pid=38975 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252574.359:7358): pid=38975 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252574.527:7359): pid=38975 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252574.528:7360): pid=38975 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252574.532:7361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252574.532:7362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252574.574:7363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252574.574:7364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252574.608:7365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252574.608:7366): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252574.814:7367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252574.815:7368): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252574.874:7369): pid=39005 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252574.874:7370): pid=39005 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6764796F737A766E66767865646D64697A6766666B65706566697A696564716A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252574.875:7371): pid=39005 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252574.877:7372): pid=39005 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252575.058:7373): pid=39005 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252575.059:7374): pid=39005 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252575.063:7375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252575.063:7376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252575.778:7377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252575.779:7378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252575.796:7379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252575.809:7380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252575.809:7381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252575.851:7382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252575.851:7383): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1781252575.860:7384): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252575.860:7385): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781252575.885:7386): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252575.885:7387): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252575.927:7388): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252575.928:7389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252575.986:7390): pid=39057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252575.987:7391): pid=39057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C656867766C6D70746270686C787A706775796C766A6F616176627176646C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252575.987:7392): pid=39057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252575.990:7393): pid=39057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252576.176:7394): pid=39057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252576.177:7395): pid=39057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252576.181:7396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252576.181:7397): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252576.223:7398): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252576.223:7399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252576.259:7400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252576.259:7401): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252576.300:7402): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252576.300:7403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252576.333:7404): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252576.333:7405): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252576.374:7406): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252576.375:7407): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252576.430:7408): pid=39100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252576.431:7409): pid=39100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76736B7971757A6D7073796C667762626679757A7070737A746577636E62656D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252576.431:7410): pid=39100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252576.434:7411): pid=39100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252576.619:7412): pid=39100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252576.619:7413): pid=39100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252576.622:7414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252576.622:7415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252576.663:7416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252576.663:7417): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252576.690:7418): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252576.690:7419): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252577.040:7420): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252577.041:7421): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252577.072:7422): pid=39130 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252577.072:7423): pid=39130 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A61677A7677736A797377727471727579676C6F796B70626A797065676C71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252577.072:7424): pid=39130 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252577.074:7425): pid=39130 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252577.220:7426): pid=39130 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252577.220:7427): pid=39130 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252577.223:7428): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252577.223:7429): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252577.542:7430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252577.542:7431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252577.574:7432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252577.575:7433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252577.616:7434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252577.616:7435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252577.654:7436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252577.654:7437): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252577.696:7438): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252577.696:7439): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252577.751:7440): pid=39178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252577.751:7441): pid=39178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D777A6C6A6278726C647A6D6571786D69687A6963776C6F6E70776A7A746D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252577.751:7442): pid=39178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252577.753:7443): pid=39178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252577.918:7444): pid=39178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252577.918:7445): pid=39178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252577.925:7446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252577.925:7447): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252577.966:7448): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252577.966:7449): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252578.007:7450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252578.007:7451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252578.049:7452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252578.049:7453): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252578.084:7454): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252578.084:7455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252578.125:7456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252578.125:7457): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252578.190:7458): pid=39221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252578.190:7459): pid=39221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7977726B6C6375747664767873737A696277787073687A6F61636A79786C656E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252578.191:7460): pid=39221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252578.193:7461): pid=39221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252578.392:7462): pid=39221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252578.393:7463): pid=39221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252578.397:7464): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252578.397:7465): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252578.438:7466): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252578.438:7467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252578.469:7468): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252578.469:7469): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252578.729:7470): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252578.729:7471): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252578.799:7472): pid=39251 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252578.799:7473): pid=39251 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A79716370676C686F6266696B7874656F6873667173656E756A73647A6C76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252578.800:7474): pid=39251 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252578.803:7475): pid=39251 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252579.015:7476): pid=39251 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252579.016:7477): pid=39251 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252579.020:7478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252579.020:7479): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252580.779:7480): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252580.779:7481): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252580.825:7482): pid=39267 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252580.826:7483): pid=39267 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B757A776E70687076756E666E6E78616A68796D6569716F61666769656F6374203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252580.826:7484): pid=39267 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252580.828:7485): pid=39267 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252581.010:7486): pid=39267 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252581.011:7487): pid=39267 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252581.015:7488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252581.015:7489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252581.113:7490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252581.113:7491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252581.178:7492): pid=39283 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252581.178:7493): pid=39283 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737275726D6472666776657069776B74726565717879707066697874686C6766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252581.178:7494): pid=39283 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252581.180:7495): pid=39283 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252581.351:7496): pid=39283 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252581.351:7497): pid=39283 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252581.356:7498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252581.356:7499): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252582.174:7500): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252582.174:7501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252582.225:7502): pid=39299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252582.225:7503): pid=39299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A756E7475626B686B7572666268747970716A697A7A75737A77766871706B6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252582.226:7504): pid=39299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252582.228:7505): pid=39299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252582.501:7506): pid=39299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252582.501:7507): pid=39299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252582.504:7508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252582.504:7509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252582.747:7510): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252582.747:7511): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252582.794:7512): pid=39319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252582.794:7513): pid=39319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75767461706375746F636F7A687A757176646F736E6675716E6B647076686B74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252582.794:7514): pid=39319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252582.796:7515): pid=39319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252585.991:7516): pid=39319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252585.992:7517): pid=39319 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252585.996:7518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252585.996:7519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252586.169:7520): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252586.170:7521): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252586.227:7522): pid=39336 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252586.227:7523): pid=39336 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62736A75637676647769727A6E736A767666647264697861717072706F7A766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252586.228:7524): pid=39336 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252586.230:7525): pid=39336 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252589.450:7526): pid=39336 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252589.450:7527): pid=39336 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252589.454:7528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252589.454:7529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252589.657:7530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252589.657:7531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252589.719:7532): pid=39353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252589.720:7533): pid=39353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C77756D61796F66786B6B78626A62657A7974666E7564627774717A646E6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252589.721:7534): pid=39353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252589.723:7535): pid=39353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252589.905:7536): pid=39353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252589.905:7537): pid=39353 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252589.909:7538): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252589.909:7539): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252590.066:7540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252590.066:7541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252590.128:7542): pid=39369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252590.128:7543): pid=39369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6979787363696463617668626678727364777A646A6B6972696E767561696D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252590.129:7544): pid=39369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252590.130:7545): pid=39369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252590.304:7546): pid=39369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252590.304:7547): pid=39369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252590.308:7548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252590.309:7549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252590.529:7550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252590.529:7551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252590.591:7552): pid=39385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252590.592:7553): pid=39385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A75666B626678696B6A63636F70626B68796F736D6A7776776D6C6D7A636267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252590.592:7554): pid=39385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252590.595:7555): pid=39385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781252591.115:7556): prog-id=261 op=LOAD
type=BPF msg=audit(1781252591.115:7557): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.115:7558): prog-id=262 op=LOAD
type=BPF msg=audit(1781252591.115:7559): prog-id=263 op=LOAD
type=BPF msg=audit(1781252591.115:7560): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.115:7561): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.118:7562): prog-id=264 op=LOAD
type=BPF msg=audit(1781252591.118:7563): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.118:7564): prog-id=265 op=LOAD
type=BPF msg=audit(1781252591.118:7565): prog-id=266 op=LOAD
type=BPF msg=audit(1781252591.118:7566): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.118:7567): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.120:7568): prog-id=267 op=LOAD
type=BPF msg=audit(1781252591.120:7569): prog-id=268 op=LOAD
type=BPF msg=audit(1781252591.120:7570): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.120:7571): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.121:7572): prog-id=269 op=LOAD
type=BPF msg=audit(1781252591.121:7573): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781252591.122:7574): prog-id=270 op=LOAD
type=BPF msg=audit(1781252591.122:7575): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781252591.150:7576): pid=39385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252591.151:7577): pid=39385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252591.155:7578): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252591.155:7579): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252591.565:7580): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252591.566:7581): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252591.619:7582): pid=39439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252591.619:7583): pid=39439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E75666375756762716B6D656E6F636C667569616D636A76716B616C686E6863203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252591.619:7584): pid=39439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252591.622:7585): pid=39439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=AVC msg=audit(1781252593.089:7586): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/2" dev="proc" ino=14380 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.089:7586): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.089:7586): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.089:7587): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/3" dev="proc" ino=14382 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.089:7587): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.089:7587): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7588): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/4" dev="proc" ino=14384 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7588): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7588): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7589): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/5" dev="proc" ino=14386 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7589): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7589): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7590): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/6" dev="proc" ino=14388 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7590): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7590): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7591): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/8" dev="proc" ino=14392 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7591): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7591): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7592): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/10" dev="proc" ino=14396 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7592): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7592): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7593): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/12" dev="proc" ino=14400 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7593): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7593): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7594): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/13" dev="proc" ino=14402 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7594): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7594): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7595): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/14" dev="proc" ino=14404 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7595): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7595): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7596): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/15" dev="proc" ino=14406 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7596): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7596): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7597): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/16" dev="proc" ino=14408 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7597): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7597): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7598): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/17" dev="proc" ino=14410 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7598): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7598): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7599): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/19" dev="proc" ino=14414 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7599): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7599): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7600): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/20" dev="proc" ino=14416 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7600): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7600): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7601): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/21" dev="proc" ino=14418 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7601): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7601): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7602): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22" dev="proc" ino=14420 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7602): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7602): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7603): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/23" dev="proc" ino=14422 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7603): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7603): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7604): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/24" dev="proc" ino=14424 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7604): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7604): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7605): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/25" dev="proc" ino=14426 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7605): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7605): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7606): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26" dev="proc" ino=14428 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7606): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7606): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7607): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27" dev="proc" ino=14430 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7607): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7607): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7608): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/29" dev="proc" ino=14434 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7608): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7608): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7609): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/30" dev="proc" ino=14436 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7609): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7609): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7610): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/31" dev="proc" ino=14438 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7610): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7610): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7611): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/32" dev="proc" ino=14440 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7611): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7611): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7612): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34" dev="proc" ino=14444 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7612): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7612): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7613): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/35" dev="proc" ino=14446 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7613): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7613): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7614): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/36" dev="proc" ino=14448 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7614): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7614): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7615): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37" dev="proc" ino=14450 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7615): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7615): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7616): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/39" dev="proc" ino=14454 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7616): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7616): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7617): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/40" dev="proc" ino=14456 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7617): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7617): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.090:7618): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/41" dev="proc" ino=14458 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.090:7618): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.090:7618): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7619): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/42" dev="proc" ino=14460 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7619): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7619): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7620): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/44" dev="proc" ino=14464 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7620): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7620): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7621): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/45" dev="proc" ino=14466 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7621): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7621): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7622): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/46" dev="proc" ino=14468 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7622): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7622): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7623): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/47" dev="proc" ino=14470 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7623): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7623): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7624): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/49" dev="proc" ino=14474 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7624): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7624): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7625): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/50" dev="proc" ino=14476 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7625): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7625): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7626): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/51" dev="proc" ino=14478 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7626): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7626): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7627): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/52" dev="proc" ino=14480 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7627): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7627): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7628): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/54" dev="proc" ino=14484 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7628): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7628): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7629): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/62" dev="proc" ino=14498 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7629): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7629): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7630): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/63" dev="proc" ino=14500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7630): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7630): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7631): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/64" dev="proc" ino=14502 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7631): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7631): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7632): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/65" dev="proc" ino=14504 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7632): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7632): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7633): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/66" dev="proc" ino=14506 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7633): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7633): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7634): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/67" dev="proc" ino=14508 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7634): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7634): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7635): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/68" dev="proc" ino=14510 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7635): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7635): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7636): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/69" dev="proc" ino=14512 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7636): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7636): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7637): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/70" dev="proc" ino=14514 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7637): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7637): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7638): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/71" dev="proc" ino=14516 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7638): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7638): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7639): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/72" dev="proc" ino=14518 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7639): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7639): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7640): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/73" dev="proc" ino=14520 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7640): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7640): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7641): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/74" dev="proc" ino=14522 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7641): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7641): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7642): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/75" dev="proc" ino=14524 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7642): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7642): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7643): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/76" dev="proc" ino=14526 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7643): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7643): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7644): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/77" dev="proc" ino=14528 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7644): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7644): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7645): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/78" dev="proc" ino=14530 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7645): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7645): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7646): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/79" dev="proc" ino=14532 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7646): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7646): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7647): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/80" dev="proc" ino=14534 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7647): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7647): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7648): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/82" dev="proc" ino=14538 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7648): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7648): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7649): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/84" dev="proc" ino=14540 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7649): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7649): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7650): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/89" dev="proc" ino=14544 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7650): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7650): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7651): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/94" dev="proc" ino=14548 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7651): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7651): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7652): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/95" dev="proc" ino=14550 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7652): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7652): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7653): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/96" dev="proc" ino=14552 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7653): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7653): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7654): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/97" dev="proc" ino=14554 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7654): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7654): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7655): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/98" dev="proc" ino=14556 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7655): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7655): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7656): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/99" dev="proc" ino=14558 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7656): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7656): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7657): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/100" dev="proc" ino=14560 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7657): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7657): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7658): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/101" dev="proc" ino=14562 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7658): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7658): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7659): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/102" dev="proc" ino=14564 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7659): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7659): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7660): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/103" dev="proc" ino=14566 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7660): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7660): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7661): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/117" dev="proc" ino=14572 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7661): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7661): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7662): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/124" dev="proc" ino=14576 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7662): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7662): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7663): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/240" dev="proc" ino=14578 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7663): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7663): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7664): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/241" dev="proc" ino=14580 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7664): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7664): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7665): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/287" dev="proc" ino=16272 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7665): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7665): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7666): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/394" dev="proc" ino=16274 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7666): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7666): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.091:7667): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/395" dev="proc" ino=16275 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.091:7667): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.091:7667): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7668): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/436" dev="proc" ino=10909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7668): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7668): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7669): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/484" dev="proc" ino=10911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7669): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7669): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7670): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/492" dev="proc" ino=10913 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7670): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7670): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7671): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/493" dev="proc" ino=10914 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7671): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7671): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7672): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/494" dev="proc" ino=10915 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7672): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7672): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7673): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/495" dev="proc" ino=10916 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7673): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7673): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7674): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/496" dev="proc" ino=10917 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7674): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7674): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7675): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/515" dev="proc" ino=10920 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7675): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7675): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7676): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/516" dev="proc" ino=10921 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7676): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7676): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7677): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/517" dev="proc" ino=10922 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7677): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7677): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7678): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/518" dev="proc" ino=10923 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7678): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7678): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7679): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/519" dev="proc" ino=10924 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7679): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7679): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7680): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/520" dev="proc" ino=10925 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7680): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7680): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7681): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/521" dev="proc" ino=10926 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7681): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7681): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7682): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/522" dev="proc" ino=10927 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7682): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7682): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7683): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/523" dev="proc" ino=10928 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7683): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7683): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7684): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/524" dev="proc" ino=10929 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7684): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7684): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7685): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/618" dev="proc" ino=17770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7685): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7685): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7686): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/635" dev="proc" ino=15102 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7686): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7686): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7687): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/698" dev="proc" ino=147734 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7687): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7687): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7688): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/699" dev="proc" ino=147735 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7688): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7688): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7689): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/700" dev="proc" ino=147736 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7689): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7689): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7690): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/701" dev="proc" ino=147737 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7690): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7690): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7691): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/702" dev="proc" ino=147738 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7691): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7691): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7692): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/704" dev="proc" ino=147739 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7692): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7692): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7693): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/706" dev="proc" ino=147740 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7693): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7693): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7694): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/707" dev="proc" ino=147741 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7694): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7694): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7695): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/724" dev="proc" ino=15253 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rpcbind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7695): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7695): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7696): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/726" dev="proc" ino=11161 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7696): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7696): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7697): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/728" dev="proc" ino=147742 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7697): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7697): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7698): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/751" dev="proc" ino=15285 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7698): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7698): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7699): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/755" dev="proc" ino=14046 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7699): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7699): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7700): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/758" dev="proc" ino=15301 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7700): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7700): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7701): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/759" dev="proc" ino=15304 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7701): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7701): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7702): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/797" dev="proc" ino=25624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7702): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7702): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7703): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/802" dev="proc" ino=18960 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7703): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7703): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7704): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/1036" dev="proc" ino=14193 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7704): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7704): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7705): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/1138" dev="proc" ino=942 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7705): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7705): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7706): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/1140" dev="proc" ino=945 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7706): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7706): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7707): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/1142" dev="proc" ino=948 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7707): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7707): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.092:7708): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/4183" dev="proc" ino=29021 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.092:7708): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.092:7708): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.096:7709): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/4339" dev="proc" ino=147743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.096:7709): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.096:7709): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.096:7710): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/5806" dev="proc" ino=147744 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.096:7710): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.096:7710): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7711): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/5982" dev="proc" ino=36898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7711): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7711): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7712): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/6595" dev="proc" ino=37243 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7712): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7712): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7713): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/6663" dev="proc" ino=147745 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7713): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7713): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7714): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/6784" dev="proc" ino=147746 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7714): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7714): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7715): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/18424" dev="proc" ino=50756 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7715): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7715): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7716): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/18436" dev="proc" ino=50742 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7716): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7716): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7717): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/18437" dev="proc" ino=147747 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7717): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7717): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7718): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22099" dev="proc" ino=147750 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7718): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7718): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7719): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22172" dev="proc" ino=68822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7719): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7719): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7720): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22178" dev="proc" ino=147751 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7720): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7720): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7721): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22179" dev="proc" ino=147752 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7721): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7721): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7722): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22180" dev="proc" ino=147753 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7722): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7722): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7723): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22181" dev="proc" ino=147754 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7723): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7723): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7724): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/22253" dev="proc" ino=69644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7724): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7724): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7725): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/23712" dev="proc" ino=147755 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7725): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7725): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7726): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26000" dev="proc" ino=147756 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7726): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7726): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7727): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26071" dev="proc" ino=147759 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7727): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7727): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7728): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26084" dev="proc" ino=147760 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7728): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7728): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7729): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26087" dev="proc" ino=147761 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7729): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7729): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7730): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26097" dev="proc" ino=93910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7730): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7730): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7731): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26102" dev="proc" ino=93988 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7731): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7731): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7732): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26409" dev="proc" ino=103441 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7732): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7732): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7733): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26413" dev="proc" ino=103511 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7733): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7733): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7734): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26416" dev="proc" ino=147763 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7734): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7734): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7735): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/26429" dev="proc" ino=101743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7735): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7735): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7736): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27076" dev="proc" ino=147765 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7736): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7736): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7737): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27159" dev="proc" ino=147766 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7737): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7737): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.097:7738): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27162" dev="proc" ino=147767 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.097:7738): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.097:7738): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7739): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27233" dev="proc" ino=147768 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7739): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7739): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7740): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27236" dev="proc" ino=147769 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7740): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7740): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7741): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27326" dev="proc" ino=147770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7741): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7741): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7742): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27327" dev="proc" ino=147771 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7742): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7742): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7743): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27348" dev="proc" ino=147772 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7743): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7743): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7744): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27349" dev="proc" ino=147773 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7744): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7744): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7745): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27350" dev="proc" ino=147774 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7745): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7745): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7746): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/27989" dev="proc" ino=147775 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7746): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7746): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7747): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/28701" dev="proc" ino=147776 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7747): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7747): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7748): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/29505" dev="proc" ino=147777 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7748): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7748): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7749): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/29531" dev="proc" ino=118112 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:tuned_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7749): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7749): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7750): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33687" dev="proc" ino=147778 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7750): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7750): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7751): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33688" dev="proc" ino=147779 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7751): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7751): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7752): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33689" dev="proc" ino=147780 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7752): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7752): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7753): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33690" dev="proc" ino=147781 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7753): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7753): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7754): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33691" dev="proc" ino=147782 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7754): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7754): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7755): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33692" dev="proc" ino=147783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7755): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7755): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.098:7756): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33693" dev="proc" ino=147784 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.098:7756): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.098:7756): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7757): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33694" dev="proc" ino=147785 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7757): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7757): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7758): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33695" dev="proc" ino=147786 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7758): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7758): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7759): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33696" dev="proc" ino=147787 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7759): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7759): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7760): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33697" dev="proc" ino=147788 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7760): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7760): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7761): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33750" dev="proc" ino=147789 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7761): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7761): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7762): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33751" dev="proc" ino=147790 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7762): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7762): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7763): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33752" dev="proc" ino=147791 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7763): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7763): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7764): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33753" dev="proc" ino=147792 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7764): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7764): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7765): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33754" dev="proc" ino=147793 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7765): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7765): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7766): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33755" dev="proc" ino=147794 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7766): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7766): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7767): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33756" dev="proc" ino=147795 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7767): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7767): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7768): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33757" dev="proc" ino=147796 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7768): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7768): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7769): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33758" dev="proc" ino=147797 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7769): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7769): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7770): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33759" dev="proc" ino=147798 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7770): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7770): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7771): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33760" dev="proc" ino=147799 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7771): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7771): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7772): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33761" dev="proc" ino=147800 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7772): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7772): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7773): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33762" dev="proc" ino=147801 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7773): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7773): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7774): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33763" dev="proc" ino=147802 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7774): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7774): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7775): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33764" dev="proc" ino=147803 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7775): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7775): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7776): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33765" dev="proc" ino=147804 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7776): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7776): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7777): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33766" dev="proc" ino=147805 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7777): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7777): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7778): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33767" dev="proc" ino=147806 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7778): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7778): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7779): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33768" dev="proc" ino=147807 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7779): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7779): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7780): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33769" dev="proc" ino=147808 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7780): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7780): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7781): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33770" dev="proc" ino=147809 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7781): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7781): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7782): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33771" dev="proc" ino=147810 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7782): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7782): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7783): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33772" dev="proc" ino=147811 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7783): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7783): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7784): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33773" dev="proc" ino=147812 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7784): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7784): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7785): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33774" dev="proc" ino=147813 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7785): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7785): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7786): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33775" dev="proc" ino=147814 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7786): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7786): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7787): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33776" dev="proc" ino=147815 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7787): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7787): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7788): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33777" dev="proc" ino=147816 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7788): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7788): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7789): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33778" dev="proc" ino=147817 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7789): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7789): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7790): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33779" dev="proc" ino=147818 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7790): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7790): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7791): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33780" dev="proc" ino=147819 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7791): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7791): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7792): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33781" dev="proc" ino=147820 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7792): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7792): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7793): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33782" dev="proc" ino=147821 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7793): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7793): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7794): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33783" dev="proc" ino=147822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7794): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7794): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7795): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33784" dev="proc" ino=147823 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7795): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7795): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7796): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33785" dev="proc" ino=147824 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7796): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7796): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7797): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33786" dev="proc" ino=147825 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7797): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7797): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7798): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33787" dev="proc" ino=147826 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7798): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7798): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7799): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33788" dev="proc" ino=147827 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7799): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7799): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.099:7800): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33789" dev="proc" ino=147828 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.099:7800): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.099:7800): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.100:7801): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33790" dev="proc" ino=147829 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.100:7801): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.100:7801): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.100:7802): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33791" dev="proc" ino=147830 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.100:7802): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.100:7802): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.100:7803): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33792" dev="proc" ino=147831 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.100:7803): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.100:7803): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.100:7804): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33793" dev="proc" ino=147832 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.100:7804): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.100:7804): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7805): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33794" dev="proc" ino=147833 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7805): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7805): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7806): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33795" dev="proc" ino=147834 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7806): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7806): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7807): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33796" dev="proc" ino=147835 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7807): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7807): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7808): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33797" dev="proc" ino=147836 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7808): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7808): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7809): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33798" dev="proc" ino=147837 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7809): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7809): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7810): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33799" dev="proc" ino=147838 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7810): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7810): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7811): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33800" dev="proc" ino=147839 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7811): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7811): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7812): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/33801" dev="proc" ino=147840 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7812): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7812): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7813): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34656" dev="proc" ino=147841 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7813): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7813): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7814): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34657" dev="proc" ino=147842 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7814): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7814): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7815): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34658" dev="proc" ino=147843 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7815): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7815): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7816): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34659" dev="proc" ino=147844 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7816): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7816): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7817): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34660" dev="proc" ino=147845 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7817): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7817): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7818): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34661" dev="proc" ino=147846 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7818): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7818): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7819): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34662" dev="proc" ino=147847 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7819): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7819): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7820): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34663" dev="proc" ino=147848 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7820): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7820): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7821): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34664" dev="proc" ino=147849 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7821): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7821): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7822): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34665" dev="proc" ino=147850 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7822): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7822): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7823): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34666" dev="proc" ino=147851 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7823): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7823): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7824): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34667" dev="proc" ino=147852 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7824): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7824): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7825): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34668" dev="proc" ino=147853 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7825): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7825): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7826): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34669" dev="proc" ino=147854 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7826): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7826): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7827): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34670" dev="proc" ino=147855 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7827): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7827): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7828): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34671" dev="proc" ino=147856 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7828): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7828): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7829): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34672" dev="proc" ino=147857 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7829): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7829): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7830): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34673" dev="proc" ino=147858 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7830): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7830): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7831): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34674" dev="proc" ino=147859 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7831): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7831): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7832): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34675" dev="proc" ino=147860 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7832): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7832): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7833): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34676" dev="proc" ino=147861 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7833): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7833): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7834): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34677" dev="proc" ino=147862 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7834): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7834): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7835): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34678" dev="proc" ino=147863 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7835): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7835): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7836): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34679" dev="proc" ino=147864 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7836): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7836): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7837): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34680" dev="proc" ino=147865 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7837): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7837): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7838): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34681" dev="proc" ino=147866 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7838): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7838): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7839): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34682" dev="proc" ino=147867 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7839): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7839): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7840): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34683" dev="proc" ino=147868 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7840): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7840): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7841): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34684" dev="proc" ino=147869 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7841): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7841): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7842): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34685" dev="proc" ino=147870 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7842): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7842): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7843): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34686" dev="proc" ino=147871 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7843): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7843): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7844): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34687" dev="proc" ino=147872 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7844): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7844): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7845): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34688" dev="proc" ino=147873 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7845): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7845): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7846): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34689" dev="proc" ino=147874 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7846): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7846): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7847): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34690" dev="proc" ino=147875 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7847): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7847): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7848): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34691" dev="proc" ino=147876 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7848): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7848): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7849): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34692" dev="proc" ino=147877 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7849): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7849): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7850): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34693" dev="proc" ino=147878 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7850): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7850): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.101:7851): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34694" dev="proc" ino=147879 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.101:7851): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.101:7851): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7852): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34695" dev="proc" ino=147880 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7852): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7852): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7853): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34696" dev="proc" ino=147881 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7853): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7853): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7854): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34697" dev="proc" ino=147882 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7854): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7854): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7855): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34698" dev="proc" ino=147883 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7855): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7855): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7856): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34699" dev="proc" ino=147884 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7856): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7856): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7857): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34700" dev="proc" ino=147885 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7857): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7857): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7858): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34701" dev="proc" ino=147886 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7858): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7858): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7859): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34702" dev="proc" ino=147887 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7859): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7859): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7860): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34703" dev="proc" ino=147888 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7860): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7860): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7861): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34704" dev="proc" ino=147889 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7861): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7861): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7862): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34705" dev="proc" ino=147890 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7862): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7862): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7863): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34706" dev="proc" ino=147891 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7863): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7863): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7864): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34707" dev="proc" ino=147892 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7864): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7864): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7865): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34708" dev="proc" ino=147893 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7865): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7865): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7866): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34709" dev="proc" ino=147894 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7866): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7866): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7867): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34710" dev="proc" ino=147895 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7867): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7867): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7868): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34711" dev="proc" ino=147896 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7868): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7868): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7869): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34712" dev="proc" ino=147897 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7869): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7869): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7870): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34713" dev="proc" ino=147898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7870): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7870): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7871): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34714" dev="proc" ino=147899 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7871): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7871): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7872): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34715" dev="proc" ino=147900 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7872): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7872): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7873): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34716" dev="proc" ino=147901 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7873): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7873): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7874): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34717" dev="proc" ino=147902 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7874): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7874): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7875): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34718" dev="proc" ino=147903 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7875): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7875): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7876): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34719" dev="proc" ino=147904 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7876): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7876): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7877): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34720" dev="proc" ino=147905 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7877): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7877): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7878): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34721" dev="proc" ino=147906 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7878): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7878): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7879): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34722" dev="proc" ino=147907 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7879): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7879): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7880): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34723" dev="proc" ino=147908 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7880): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7880): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7881): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/34766" dev="proc" ino=147909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7881): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7881): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7882): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/35869" dev="proc" ino=147910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7882): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7882): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7883): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/35934" dev="proc" ino=147911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7883): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7883): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7884): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/36254" dev="proc" ino=147666 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7884): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7884): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7885): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37193" dev="proc" ino=156607 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7885): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7885): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7886): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37739" dev="proc" ino=158783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7886): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7886): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7887): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37740" dev="proc" ino=157091 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7887): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7887): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7888): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37962" dev="proc" ino=156608 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7888): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7888): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7889): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37963" dev="proc" ino=156609 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7889): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7889): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7890): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37964" dev="proc" ino=156610 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7890): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7890): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7891): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37965" dev="proc" ino=156611 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7891): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7891): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7892): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37966" dev="proc" ino=156612 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7892): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7892): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7893): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37967" dev="proc" ino=156613 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7893): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7893): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7894): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37968" dev="proc" ino=156614 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7894): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7894): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7895): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37969" dev="proc" ino=156615 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7895): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7895): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7896): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37970" dev="proc" ino=156616 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7896): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7896): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7897): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37971" dev="proc" ino=156617 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7897): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7897): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7898): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37972" dev="proc" ino=156618 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7898): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7898): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7899): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37973" dev="proc" ino=156619 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7899): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7899): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7900): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37974" dev="proc" ino=156620 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7900): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7900): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.102:7901): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37975" dev="proc" ino=156621 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.102:7901): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.102:7901): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7902): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37976" dev="proc" ino=156622 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7902): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7902): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7903): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37977" dev="proc" ino=156623 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7903): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7903): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7904): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37978" dev="proc" ino=156624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7904): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7904): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7905): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37979" dev="proc" ino=156625 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7905): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7905): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7906): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37980" dev="proc" ino=156626 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7906): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7906): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7907): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37981" dev="proc" ino=156627 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7907): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7907): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7908): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37982" dev="proc" ino=156628 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7908): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7908): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7909): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37983" dev="proc" ino=156629 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7909): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7909): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7910): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37984" dev="proc" ino=156630 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7910): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7910): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7911): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37985" dev="proc" ino=156631 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7911): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7911): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7912): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37986" dev="proc" ino=156632 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7912): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7912): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7913): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37987" dev="proc" ino=156633 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7913): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7913): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7914): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37988" dev="proc" ino=156634 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7914): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7914): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7915): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37989" dev="proc" ino=156635 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7915): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7915): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7916): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37990" dev="proc" ino=156636 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7916): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7916): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7917): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37991" dev="proc" ino=156637 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7917): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7917): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7918): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37992" dev="proc" ino=156638 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7918): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7918): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7919): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37993" dev="proc" ino=156639 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7919): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7919): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7920): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37994" dev="proc" ino=156640 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7920): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7920): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7921): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37995" dev="proc" ino=156641 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7921): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7921): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7922): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37996" dev="proc" ino=156642 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7922): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7922): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7923): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37997" dev="proc" ino=156643 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7923): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7923): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7924): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37998" dev="proc" ino=156644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7924): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7924): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7925): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/37999" dev="proc" ino=156645 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7925): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7925): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7926): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38000" dev="proc" ino=156646 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7926): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7926): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7927): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38001" dev="proc" ino=156647 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7927): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7927): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7928): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38002" dev="proc" ino=156648 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7928): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7928): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7929): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38003" dev="proc" ino=156649 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7929): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7929): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7930): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38004" dev="proc" ino=156650 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7930): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7930): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7931): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38005" dev="proc" ino=156651 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7931): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7931): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7932): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38006" dev="proc" ino=156652 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7932): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7932): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7933): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38007" dev="proc" ino=156653 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7933): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7933): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7934): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38008" dev="proc" ino=156654 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7934): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7934): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7935): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38009" dev="proc" ino=156655 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7935): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7935): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7936): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38010" dev="proc" ino=156656 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7936): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7936): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7937): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38030" dev="proc" ino=156657 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7937): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7937): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7938): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38338" dev="proc" ino=158500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7938): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7938): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7939): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38555" dev="proc" ino=160326 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7939): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7939): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7940): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38556" dev="proc" ino=160336 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7940): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7940): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7941): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38557" dev="proc" ino=164129 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7941): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7941): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7942): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38558" dev="proc" ino=164137 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7942): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7942): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7943): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38559" dev="proc" ino=164155 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7943): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7943): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7944): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38560" dev="proc" ino=164147 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7944): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7944): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7945): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38561" dev="proc" ino=164163 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7945): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7945): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7946): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/38621" dev="proc" ino=160387 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7946): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7946): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7947): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/39426" dev="proc" ino=167374 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7947): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7947): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7948): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/39439" dev="proc" ino=170011 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7948): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7948): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.103:7949): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/39441" dev="proc" ino=166314 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.103:7949): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.103:7949): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252593.104:7950): avc:  denied  { getattr } for  pid=39460 comm="pkill" path="/proc/39443" dev="proc" ino=169206 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252593.104:7950): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5648dd196030 a2=7f84c0fe2aa0 a3=0 items=0 ppid=39457 pid=39460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252593.104:7950): proctitle=706B696C6C002D55535231006874747064
type=USER_END msg=audit(1781252593.181:7951): pid=39439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252593.182:7952): pid=39439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252593.187:7953): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252593.187:7954): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781252593.480:7955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252593.676:7956): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252593.676:7957): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252593.740:7958): pid=39479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252593.740:7959): pid=39479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68706A6F7967686C6A767776686F66657578626373656D677374776762726873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252593.742:7960): pid=39479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252593.744:7961): pid=39479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781252593.783:7962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.1-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252594.873:7963): pid=39504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=39504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=AVC msg=audit(1781252594.934:7964): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/2" dev="proc" ino=14380 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7964): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7964): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7965): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/3" dev="proc" ino=14382 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7965): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7965): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7966): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/4" dev="proc" ino=14384 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7966): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7966): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7967): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/5" dev="proc" ino=14386 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7967): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7967): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7968): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/6" dev="proc" ino=14388 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7968): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7968): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7969): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/8" dev="proc" ino=14392 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7969): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7969): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7970): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/10" dev="proc" ino=14396 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7970): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7970): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7971): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/12" dev="proc" ino=14400 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7971): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7971): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7972): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/13" dev="proc" ino=14402 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7972): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7972): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7973): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/14" dev="proc" ino=14404 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7973): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7973): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7974): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/15" dev="proc" ino=14406 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7974): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7974): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7975): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/16" dev="proc" ino=14408 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7975): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7975): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7976): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/17" dev="proc" ino=14410 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7976): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7976): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7977): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/19" dev="proc" ino=14414 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7977): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7977): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7978): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/20" dev="proc" ino=14416 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7978): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7978): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7979): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/21" dev="proc" ino=14418 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7979): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7979): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7980): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22" dev="proc" ino=14420 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7980): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7980): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7981): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/23" dev="proc" ino=14422 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7981): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7981): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7982): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/24" dev="proc" ino=14424 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7982): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7982): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7983): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/25" dev="proc" ino=14426 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7983): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7983): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7984): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26" dev="proc" ino=14428 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7984): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7984): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7985): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27" dev="proc" ino=14430 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7985): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7985): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7986): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/29" dev="proc" ino=14434 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7986): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7986): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7987): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/30" dev="proc" ino=14436 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7987): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7987): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7988): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/31" dev="proc" ino=14438 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7988): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7988): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7989): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/32" dev="proc" ino=14440 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7989): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7989): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7990): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34" dev="proc" ino=14444 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7990): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7990): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7991): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/35" dev="proc" ino=14446 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7991): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7991): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7992): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/36" dev="proc" ino=14448 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7992): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7992): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7993): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37" dev="proc" ino=14450 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7993): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7993): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7994): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39" dev="proc" ino=14454 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7994): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7994): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7995): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/40" dev="proc" ino=14456 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7995): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7995): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7996): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/41" dev="proc" ino=14458 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7996): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7996): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7997): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/42" dev="proc" ino=14460 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7997): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7997): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7998): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/44" dev="proc" ino=14464 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7998): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7998): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:7999): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/45" dev="proc" ino=14466 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:7999): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:7999): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8000): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/46" dev="proc" ino=14468 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8000): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8000): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8001): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/47" dev="proc" ino=14470 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8001): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8001): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8002): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/49" dev="proc" ino=14474 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8002): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8002): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8003): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/50" dev="proc" ino=14476 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8003): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8003): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8004): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/51" dev="proc" ino=14478 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8004): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8004): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8005): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/52" dev="proc" ino=14480 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8005): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8005): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8006): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/54" dev="proc" ino=14484 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8006): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8006): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8007): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/62" dev="proc" ino=14498 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8007): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8007): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8008): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/63" dev="proc" ino=14500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8008): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8008): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8009): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/64" dev="proc" ino=14502 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8009): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8009): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8010): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/65" dev="proc" ino=14504 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8010): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8010): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8011): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/66" dev="proc" ino=14506 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8011): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8011): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8012): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/67" dev="proc" ino=14508 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8012): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8012): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8013): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/68" dev="proc" ino=14510 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8013): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8013): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.934:8014): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/69" dev="proc" ino=14512 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.934:8014): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.934:8014): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8015): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/70" dev="proc" ino=14514 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8015): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8015): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8016): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/71" dev="proc" ino=14516 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8016): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8016): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8017): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/72" dev="proc" ino=14518 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8017): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8017): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8018): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/73" dev="proc" ino=14520 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8018): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8018): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8019): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/74" dev="proc" ino=14522 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8019): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8019): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8020): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/75" dev="proc" ino=14524 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8020): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8020): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8021): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/76" dev="proc" ino=14526 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8021): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8021): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8022): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/77" dev="proc" ino=14528 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8022): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8022): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8023): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/78" dev="proc" ino=14530 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8023): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8023): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8024): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/79" dev="proc" ino=14532 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8024): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8024): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8025): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/80" dev="proc" ino=14534 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8025): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8025): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8026): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/82" dev="proc" ino=14538 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8026): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8026): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8027): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/84" dev="proc" ino=14540 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8027): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8027): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8028): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/89" dev="proc" ino=14544 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8028): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8028): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8029): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/94" dev="proc" ino=14548 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8029): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8029): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8030): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/95" dev="proc" ino=14550 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8030): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8030): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8031): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/96" dev="proc" ino=14552 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8031): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8031): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8032): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/97" dev="proc" ino=14554 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8032): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8032): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8033): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/98" dev="proc" ino=14556 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8033): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8033): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8034): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/99" dev="proc" ino=14558 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8034): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8034): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8035): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/100" dev="proc" ino=14560 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8035): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8035): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8036): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/101" dev="proc" ino=14562 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8036): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8036): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8037): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/102" dev="proc" ino=14564 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8037): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8037): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8038): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/103" dev="proc" ino=14566 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8038): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8038): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8039): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/117" dev="proc" ino=14572 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8039): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8039): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8040): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/124" dev="proc" ino=14576 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8040): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8040): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8041): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/240" dev="proc" ino=14578 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8041): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8041): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8042): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/241" dev="proc" ino=14580 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8042): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8042): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8043): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/287" dev="proc" ino=16272 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8043): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8043): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8044): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/394" dev="proc" ino=16274 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8044): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8044): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8045): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/395" dev="proc" ino=16275 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8045): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8045): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8046): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/436" dev="proc" ino=10909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8046): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8046): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8047): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/484" dev="proc" ino=10911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8047): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8047): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8048): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/492" dev="proc" ino=10913 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8048): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8048): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8049): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/493" dev="proc" ino=10914 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8049): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8049): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8050): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/494" dev="proc" ino=10915 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8050): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8050): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8051): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/495" dev="proc" ino=10916 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8051): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8051): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8052): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/496" dev="proc" ino=10917 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8052): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8052): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8053): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/515" dev="proc" ino=10920 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8053): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8053): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8054): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/516" dev="proc" ino=10921 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8054): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8054): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8055): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/517" dev="proc" ino=10922 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8055): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8055): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8056): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/518" dev="proc" ino=10923 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8056): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8056): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8057): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/519" dev="proc" ino=10924 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8057): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8057): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8058): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/520" dev="proc" ino=10925 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8058): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8058): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8059): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/521" dev="proc" ino=10926 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8059): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8059): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8060): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/522" dev="proc" ino=10927 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8060): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8060): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8061): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/523" dev="proc" ino=10928 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8061): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8061): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8062): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/524" dev="proc" ino=10929 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8062): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8062): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8063): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/618" dev="proc" ino=17770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8063): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8063): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8064): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/635" dev="proc" ino=15102 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8064): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8064): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8065): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/698" dev="proc" ino=147734 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8065): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8065): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8066): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/699" dev="proc" ino=147735 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8066): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8066): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8067): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/700" dev="proc" ino=147736 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8067): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8067): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8068): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/701" dev="proc" ino=147737 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8068): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8068): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8069): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/702" dev="proc" ino=147738 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8069): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8069): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8070): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/704" dev="proc" ino=147739 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8070): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8070): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8071): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/706" dev="proc" ino=147740 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8071): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8071): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8072): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/707" dev="proc" ino=147741 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8072): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8072): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.935:8073): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/724" dev="proc" ino=15253 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rpcbind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.935:8073): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.935:8073): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8074): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/726" dev="proc" ino=11161 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8074): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8074): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8075): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/728" dev="proc" ino=147742 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8075): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8075): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8076): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/751" dev="proc" ino=15285 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8076): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8076): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8077): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/755" dev="proc" ino=14046 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8077): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8077): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8078): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/758" dev="proc" ino=15301 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8078): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8078): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8079): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/759" dev="proc" ino=15304 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8079): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8079): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8080): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/797" dev="proc" ino=25624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8080): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8080): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8081): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/802" dev="proc" ino=18960 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8081): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8081): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8082): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/1036" dev="proc" ino=14193 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8082): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8082): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8083): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/1138" dev="proc" ino=942 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8083): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8083): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8084): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/1140" dev="proc" ino=945 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8084): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8084): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8085): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/1142" dev="proc" ino=948 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8085): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8085): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8086): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/4183" dev="proc" ino=29021 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8086): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8086): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8087): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/4339" dev="proc" ino=147743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8087): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8087): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8088): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/5806" dev="proc" ino=147744 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8088): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8088): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8089): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/5982" dev="proc" ino=36898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8089): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8089): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8090): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/6595" dev="proc" ino=37243 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8090): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8090): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8091): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/6663" dev="proc" ino=147745 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8091): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8091): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8092): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/6784" dev="proc" ino=147746 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8092): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8092): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8093): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/18424" dev="proc" ino=50756 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8093): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8093): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8094): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/18436" dev="proc" ino=50742 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8094): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8094): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8095): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/18437" dev="proc" ino=147747 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8095): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8095): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8096): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22099" dev="proc" ino=147750 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8096): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8096): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8097): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22172" dev="proc" ino=68822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8097): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8097): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8098): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22178" dev="proc" ino=147751 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8098): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8098): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8099): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22179" dev="proc" ino=147752 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8099): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8099): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8100): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22180" dev="proc" ino=147753 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8100): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8100): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8101): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22181" dev="proc" ino=147754 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8101): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8101): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8102): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/22253" dev="proc" ino=69644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8102): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8102): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8103): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/23712" dev="proc" ino=147755 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8103): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8103): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8104): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26000" dev="proc" ino=147756 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8104): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8104): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8105): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26071" dev="proc" ino=147759 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8105): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8105): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8106): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26084" dev="proc" ino=147760 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8106): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8106): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8107): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26087" dev="proc" ino=147761 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8107): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8107): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8108): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26097" dev="proc" ino=93910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8108): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8108): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8109): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26102" dev="proc" ino=93988 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8109): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8109): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8110): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26409" dev="proc" ino=103441 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8110): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8110): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8111): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26413" dev="proc" ino=103511 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8111): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8111): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8112): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26416" dev="proc" ino=147763 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8112): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8112): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8113): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/26429" dev="proc" ino=101743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8113): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8113): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8114): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27076" dev="proc" ino=147765 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8114): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8114): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8115): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27159" dev="proc" ino=147766 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8115): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8115): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8116): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27162" dev="proc" ino=147767 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8116): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8116): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8117): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27233" dev="proc" ino=147768 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8117): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8117): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8118): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27236" dev="proc" ino=147769 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8118): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8118): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8119): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27326" dev="proc" ino=147770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8119): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8119): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8120): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27327" dev="proc" ino=147771 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8120): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8120): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8121): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27348" dev="proc" ino=147772 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8121): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8121): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8122): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27349" dev="proc" ino=147773 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8122): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8122): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8123): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27350" dev="proc" ino=147774 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8123): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8123): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8124): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/27989" dev="proc" ino=147775 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8124): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8124): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8125): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/28701" dev="proc" ino=147776 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8125): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8125): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8126): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/29505" dev="proc" ino=147777 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8126): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8126): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8127): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/29531" dev="proc" ino=118112 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:tuned_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8127): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8127): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8128): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33687" dev="proc" ino=147778 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8128): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8128): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8129): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33688" dev="proc" ino=147779 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8129): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8129): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8130): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33689" dev="proc" ino=147780 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8130): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8130): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8131): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33690" dev="proc" ino=147781 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8131): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8131): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8132): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33691" dev="proc" ino=147782 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8132): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8132): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8133): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33692" dev="proc" ino=147783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8133): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8133): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8134): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33693" dev="proc" ino=147784 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8134): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8134): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8135): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33694" dev="proc" ino=147785 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8135): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8135): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8136): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33695" dev="proc" ino=147786 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8136): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8136): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8137): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33696" dev="proc" ino=147787 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8137): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8137): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8138): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33697" dev="proc" ino=147788 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8138): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8138): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8139): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33750" dev="proc" ino=147789 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8139): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8139): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8140): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33751" dev="proc" ino=147790 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8140): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8140): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8141): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33752" dev="proc" ino=147791 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8141): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8141): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8142): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33753" dev="proc" ino=147792 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8142): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8142): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8143): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33754" dev="proc" ino=147793 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8143): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8143): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8144): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33755" dev="proc" ino=147794 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8144): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8144): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8145): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33756" dev="proc" ino=147795 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8145): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8145): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8146): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33757" dev="proc" ino=147796 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8146): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8146): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8147): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33758" dev="proc" ino=147797 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8147): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8147): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8148): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33759" dev="proc" ino=147798 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8148): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8148): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8149): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33760" dev="proc" ino=147799 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8149): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8149): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8150): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33761" dev="proc" ino=147800 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8150): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8150): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8151): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33762" dev="proc" ino=147801 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8151): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8151): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8152): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33763" dev="proc" ino=147802 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8152): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8152): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8153): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33764" dev="proc" ino=147803 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8153): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8153): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8154): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33765" dev="proc" ino=147804 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8154): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8154): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8155): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33766" dev="proc" ino=147805 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8155): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8155): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8156): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33767" dev="proc" ino=147806 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8156): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8156): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8157): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33768" dev="proc" ino=147807 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8157): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8157): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8158): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33769" dev="proc" ino=147808 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8158): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8158): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8159): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33770" dev="proc" ino=147809 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8159): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8159): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8160): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33771" dev="proc" ino=147810 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8160): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8160): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8161): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33772" dev="proc" ino=147811 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8161): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8161): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8162): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33773" dev="proc" ino=147812 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8162): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8162): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.936:8163): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33774" dev="proc" ino=147813 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.936:8163): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.936:8163): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8164): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33775" dev="proc" ino=147814 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8164): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8164): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8165): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33776" dev="proc" ino=147815 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8165): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8165): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8166): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33777" dev="proc" ino=147816 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8166): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8166): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8167): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33778" dev="proc" ino=147817 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8167): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8167): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8168): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33779" dev="proc" ino=147818 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8168): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8168): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8169): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33780" dev="proc" ino=147819 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8169): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8169): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8170): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33781" dev="proc" ino=147820 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8170): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8170): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8171): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33782" dev="proc" ino=147821 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8171): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8171): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8172): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33783" dev="proc" ino=147822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8172): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8172): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8173): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33784" dev="proc" ino=147823 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8173): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8173): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8174): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33785" dev="proc" ino=147824 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8174): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8174): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8175): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33786" dev="proc" ino=147825 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8175): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8175): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8176): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33787" dev="proc" ino=147826 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8176): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8176): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8177): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33788" dev="proc" ino=147827 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8177): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8177): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8178): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33789" dev="proc" ino=147828 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8178): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8178): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8179): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33790" dev="proc" ino=147829 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8179): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8179): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8180): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33791" dev="proc" ino=147830 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8180): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8180): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8181): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33792" dev="proc" ino=147831 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8181): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8181): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8182): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33793" dev="proc" ino=147832 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8182): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8182): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8183): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33794" dev="proc" ino=147833 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8183): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8183): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8184): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33795" dev="proc" ino=147834 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8184): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8184): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8185): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33796" dev="proc" ino=147835 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8185): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8185): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8186): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33797" dev="proc" ino=147836 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8186): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8186): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8187): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33798" dev="proc" ino=147837 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8187): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8187): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8188): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33799" dev="proc" ino=147838 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8188): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8188): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8189): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33800" dev="proc" ino=147839 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8189): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8189): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8190): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/33801" dev="proc" ino=147840 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8190): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8190): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8191): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34656" dev="proc" ino=147841 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8191): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8191): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8192): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34657" dev="proc" ino=147842 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8192): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8192): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8193): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34658" dev="proc" ino=147843 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8193): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8193): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8194): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34659" dev="proc" ino=147844 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8194): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8194): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8195): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34660" dev="proc" ino=147845 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8195): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8195): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8196): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34661" dev="proc" ino=147846 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8196): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8196): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8197): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34662" dev="proc" ino=147847 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8197): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8197): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8198): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34663" dev="proc" ino=147848 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8198): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8198): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8199): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34664" dev="proc" ino=147849 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8199): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8199): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8200): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34665" dev="proc" ino=147850 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8200): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8200): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8201): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34666" dev="proc" ino=147851 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8201): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8201): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8202): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34667" dev="proc" ino=147852 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8202): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8202): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8203): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34668" dev="proc" ino=147853 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8203): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8203): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8204): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34669" dev="proc" ino=147854 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8204): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8204): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8205): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34670" dev="proc" ino=147855 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8205): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8205): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8206): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34671" dev="proc" ino=147856 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8206): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8206): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8207): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34672" dev="proc" ino=147857 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8207): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8207): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8208): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34673" dev="proc" ino=147858 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8208): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8208): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8209): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34674" dev="proc" ino=147859 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8209): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8209): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8210): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34675" dev="proc" ino=147860 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8210): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8210): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8211): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34676" dev="proc" ino=147861 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8211): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8211): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8212): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34677" dev="proc" ino=147862 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8212): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8212): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8213): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34678" dev="proc" ino=147863 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8213): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8213): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8214): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34679" dev="proc" ino=147864 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8214): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8214): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8215): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34680" dev="proc" ino=147865 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8215): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8215): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8216): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34681" dev="proc" ino=147866 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8216): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8216): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8217): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34682" dev="proc" ino=147867 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8217): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8217): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8218): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34683" dev="proc" ino=147868 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8218): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8218): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8219): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34684" dev="proc" ino=147869 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8219): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8219): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8220): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34685" dev="proc" ino=147870 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8220): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8220): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8221): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34686" dev="proc" ino=147871 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8221): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8221): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8222): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34687" dev="proc" ino=147872 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8222): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8222): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8223): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34688" dev="proc" ino=147873 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8223): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8223): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8224): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34689" dev="proc" ino=147874 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8224): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8224): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8225): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34690" dev="proc" ino=147875 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8225): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8225): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8226): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34691" dev="proc" ino=147876 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8226): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8226): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8227): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34692" dev="proc" ino=147877 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8227): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8227): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8228): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34693" dev="proc" ino=147878 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8228): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8228): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8229): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34694" dev="proc" ino=147879 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8229): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8229): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8230): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34695" dev="proc" ino=147880 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8230): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8230): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8231): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34696" dev="proc" ino=147881 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8231): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8231): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8232): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34697" dev="proc" ino=147882 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8232): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8232): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8233): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34698" dev="proc" ino=147883 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8233): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8233): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8234): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34699" dev="proc" ino=147884 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8234): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8234): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8235): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34700" dev="proc" ino=147885 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8235): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8235): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8236): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34701" dev="proc" ino=147886 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8236): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8236): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8237): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34702" dev="proc" ino=147887 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8237): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8237): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8238): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34703" dev="proc" ino=147888 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8238): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8238): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8239): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34704" dev="proc" ino=147889 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8239): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8239): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8240): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34705" dev="proc" ino=147890 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8240): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8240): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8241): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34706" dev="proc" ino=147891 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8241): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8241): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8242): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34707" dev="proc" ino=147892 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8242): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8242): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8243): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34708" dev="proc" ino=147893 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8243): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8243): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8244): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34709" dev="proc" ino=147894 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8244): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8244): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8245): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34710" dev="proc" ino=147895 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8245): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8245): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8246): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34711" dev="proc" ino=147896 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8246): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8246): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8247): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34712" dev="proc" ino=147897 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8247): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8247): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8248): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34713" dev="proc" ino=147898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8248): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8248): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8249): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34714" dev="proc" ino=147899 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8249): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8249): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8250): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34715" dev="proc" ino=147900 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8250): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8250): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8251): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34716" dev="proc" ino=147901 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8251): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8251): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8252): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34717" dev="proc" ino=147902 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8252): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8252): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8253): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34718" dev="proc" ino=147903 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8253): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8253): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8254): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34719" dev="proc" ino=147904 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8254): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8254): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8255): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34720" dev="proc" ino=147905 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8255): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8255): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8256): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34721" dev="proc" ino=147906 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8256): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8256): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8257): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34722" dev="proc" ino=147907 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8257): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8257): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8258): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34723" dev="proc" ino=147908 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8258): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8258): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8259): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/34766" dev="proc" ino=147909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8259): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8259): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8260): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/35869" dev="proc" ino=147910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8260): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8260): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8261): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/35934" dev="proc" ino=147911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8261): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8261): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8262): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/36254" dev="proc" ino=147666 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8262): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8262): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8263): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37193" dev="proc" ino=156607 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8263): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8263): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8264): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37739" dev="proc" ino=158783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8264): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8264): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8265): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37740" dev="proc" ino=157091 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8265): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8265): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8266): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37962" dev="proc" ino=156608 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8266): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8266): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8267): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37963" dev="proc" ino=156609 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8267): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8267): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8268): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37964" dev="proc" ino=156610 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8268): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8268): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8269): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37965" dev="proc" ino=156611 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8269): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8269): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8270): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37966" dev="proc" ino=156612 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8270): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8270): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8271): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37967" dev="proc" ino=156613 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8271): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8271): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8272): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37968" dev="proc" ino=156614 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8272): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8272): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8273): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37969" dev="proc" ino=156615 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8273): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8273): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8274): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37970" dev="proc" ino=156616 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8274): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8274): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8275): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37971" dev="proc" ino=156617 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8275): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8275): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8276): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37972" dev="proc" ino=156618 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8276): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8276): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8277): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37973" dev="proc" ino=156619 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8277): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8277): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8278): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37974" dev="proc" ino=156620 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8278): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8278): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8279): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37975" dev="proc" ino=156621 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8279): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8279): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8280): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37976" dev="proc" ino=156622 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8280): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8280): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8281): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37977" dev="proc" ino=156623 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8281): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8281): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8282): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37978" dev="proc" ino=156624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8282): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8282): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8283): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37979" dev="proc" ino=156625 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8283): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8283): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8284): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37980" dev="proc" ino=156626 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8284): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8284): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8285): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37981" dev="proc" ino=156627 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8285): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8285): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8286): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37982" dev="proc" ino=156628 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8286): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8286): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8287): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37983" dev="proc" ino=156629 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8287): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8287): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8288): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37984" dev="proc" ino=156630 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8288): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8288): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8289): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37985" dev="proc" ino=156631 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8289): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8289): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8290): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37986" dev="proc" ino=156632 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8290): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8290): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8291): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37987" dev="proc" ino=156633 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8291): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8291): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8292): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37988" dev="proc" ino=156634 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8292): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8292): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8293): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37989" dev="proc" ino=156635 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8293): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8293): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8294): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37990" dev="proc" ino=156636 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8294): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8294): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8295): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37991" dev="proc" ino=156637 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8295): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8295): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.937:8296): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37992" dev="proc" ino=156638 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.937:8296): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.937:8296): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8297): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37993" dev="proc" ino=156639 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8297): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8297): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8298): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37994" dev="proc" ino=156640 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8298): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8298): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8299): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37995" dev="proc" ino=156641 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8299): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8299): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8300): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37996" dev="proc" ino=156642 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8300): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8300): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8301): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37997" dev="proc" ino=156643 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8301): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8301): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8302): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37998" dev="proc" ino=156644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8302): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8302): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8303): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/37999" dev="proc" ino=156645 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8303): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8303): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8304): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38000" dev="proc" ino=156646 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8304): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8304): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8305): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38001" dev="proc" ino=156647 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8305): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8305): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8306): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38002" dev="proc" ino=156648 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8306): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8306): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8307): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38003" dev="proc" ino=156649 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8307): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8307): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8308): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38004" dev="proc" ino=156650 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8308): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8308): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8309): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38005" dev="proc" ino=156651 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8309): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8309): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8310): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38006" dev="proc" ino=156652 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8310): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8310): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8311): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38007" dev="proc" ino=156653 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8311): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8311): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8312): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38008" dev="proc" ino=156654 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8312): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8312): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8313): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38009" dev="proc" ino=156655 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8313): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8313): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8314): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38010" dev="proc" ino=156656 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8314): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8314): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8315): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38030" dev="proc" ino=156657 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8315): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8315): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8316): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38338" dev="proc" ino=158500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8316): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8316): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8317): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38555" dev="proc" ino=160326 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8317): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8317): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8318): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38556" dev="proc" ino=160336 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8318): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8318): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8319): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38557" dev="proc" ino=164129 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8319): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8319): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8320): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38558" dev="proc" ino=164137 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8320): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8320): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8321): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38559" dev="proc" ino=164155 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8321): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8321): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8322): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38560" dev="proc" ino=164147 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8322): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8322): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8323): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38561" dev="proc" ino=164163 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8323): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8323): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8324): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/38621" dev="proc" ino=160387 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8324): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8324): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8325): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39461" dev="proc" ino=161299 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8325): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8325): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8326): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39466" dev="proc" ino=169257 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8326): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8326): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8327): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39479" dev="proc" ino=166376 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8327): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8327): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8328): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39482" dev="proc" ino=166403 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8328): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8328): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8329): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39486" dev="proc" ino=161340 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8329): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8329): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8330): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39488" dev="proc" ino=167427 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8330): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8330): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8331): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39502" dev="proc" ino=161366 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8331): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8331): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252594.938:8332): avc:  denied  { getattr } for  pid=39510 comm="pkill" path="/proc/39504" dev="proc" ino=170053 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252594.938:8332): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=56174d79f030 a2=7f5571ac4aa0 a3=0 items=0 ppid=39507 pid=39510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252594.938:8332): proctitle=706B696C6C002D55535231006874747064
type=USER_END msg=audit(1781252595.035:8333): pid=39479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252595.035:8334): pid=39479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252595.038:8335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252595.038:8336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252595.341:8337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252595.341:8338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252595.416:8339): pid=39525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252595.416:8340): pid=39525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6969777A6B66756B6376626B6F7874646670686E736C72617361706876707A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252595.417:8341): pid=39525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252595.421:8342): pid=39525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252595.930:8343): pid=39502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=39504 suid=74 rport=52866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252595.931:8344): pid=39502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=39504 suid=74 rport=52866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252596.613:8345): pid=39502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="k" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=AVC msg=audit(1781252596.716:8346): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/2" dev="proc" ino=14380 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8346): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8346): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8347): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/3" dev="proc" ino=14382 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8347): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8347): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8348): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/4" dev="proc" ino=14384 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8348): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8348): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8349): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/5" dev="proc" ino=14386 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8349): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8349): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8350): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/6" dev="proc" ino=14388 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8350): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8350): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8351): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/8" dev="proc" ino=14392 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8351): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8351): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8352): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/10" dev="proc" ino=14396 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8352): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8352): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8353): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/12" dev="proc" ino=14400 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8353): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8353): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8354): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/13" dev="proc" ino=14402 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8354): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8354): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8355): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/14" dev="proc" ino=14404 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8355): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8355): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8356): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/15" dev="proc" ino=14406 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8356): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8356): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8357): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/16" dev="proc" ino=14408 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8357): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8357): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8358): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/17" dev="proc" ino=14410 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8358): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8358): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8359): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/19" dev="proc" ino=14414 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8359): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8359): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8360): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/20" dev="proc" ino=14416 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8360): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8360): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8361): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/21" dev="proc" ino=14418 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8361): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8361): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8362): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22" dev="proc" ino=14420 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8362): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8362): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8363): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/23" dev="proc" ino=14422 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8363): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8363): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8364): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/24" dev="proc" ino=14424 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8364): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8364): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8365): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/25" dev="proc" ino=14426 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8365): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8365): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8366): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26" dev="proc" ino=14428 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8366): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8366): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8367): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27" dev="proc" ino=14430 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8367): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8367): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8368): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/29" dev="proc" ino=14434 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8368): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8368): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8369): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/30" dev="proc" ino=14436 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8369): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8369): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8370): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/31" dev="proc" ino=14438 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8370): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8370): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8371): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/32" dev="proc" ino=14440 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8371): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8371): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8372): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34" dev="proc" ino=14444 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8372): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8372): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8373): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/35" dev="proc" ino=14446 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8373): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8373): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8374): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/36" dev="proc" ino=14448 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8374): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8374): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8375): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37" dev="proc" ino=14450 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8375): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8375): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8376): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39" dev="proc" ino=14454 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8376): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8376): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8377): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/40" dev="proc" ino=14456 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8377): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8377): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8378): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/41" dev="proc" ino=14458 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8378): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8378): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8379): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/42" dev="proc" ino=14460 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8379): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8379): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8380): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/44" dev="proc" ino=14464 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8380): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8380): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8381): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/45" dev="proc" ino=14466 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8381): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8381): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8382): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/46" dev="proc" ino=14468 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8382): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8382): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8383): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/47" dev="proc" ino=14470 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8383): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8383): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8384): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/49" dev="proc" ino=14474 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8384): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8384): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8385): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/50" dev="proc" ino=14476 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8385): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8385): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8386): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/51" dev="proc" ino=14478 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8386): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8386): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8387): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/52" dev="proc" ino=14480 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8387): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8387): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8388): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/54" dev="proc" ino=14484 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8388): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8388): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8389): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/62" dev="proc" ino=14498 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8389): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8389): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8390): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/63" dev="proc" ino=14500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8390): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8390): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8391): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/64" dev="proc" ino=14502 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8391): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8391): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.716:8392): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/65" dev="proc" ino=14504 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.716:8392): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.716:8392): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8393): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/66" dev="proc" ino=14506 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8393): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8393): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8394): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/67" dev="proc" ino=14508 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8394): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8394): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8395): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/68" dev="proc" ino=14510 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8395): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8395): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8396): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/69" dev="proc" ino=14512 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8396): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8396): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8397): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/70" dev="proc" ino=14514 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8397): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8397): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8398): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/71" dev="proc" ino=14516 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8398): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8398): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8399): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/72" dev="proc" ino=14518 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8399): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8399): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8400): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/73" dev="proc" ino=14520 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8400): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8400): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8401): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/74" dev="proc" ino=14522 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8401): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8401): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8402): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/75" dev="proc" ino=14524 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8402): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8402): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8403): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/76" dev="proc" ino=14526 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8403): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8403): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8404): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/77" dev="proc" ino=14528 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8404): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8404): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8405): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/78" dev="proc" ino=14530 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8405): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8405): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8406): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/79" dev="proc" ino=14532 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8406): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8406): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8407): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/80" dev="proc" ino=14534 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8407): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8407): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8408): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/82" dev="proc" ino=14538 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8408): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8408): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8409): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/84" dev="proc" ino=14540 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8409): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8409): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8410): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/89" dev="proc" ino=14544 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8410): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8410): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8411): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/94" dev="proc" ino=14548 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8411): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8411): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8412): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/95" dev="proc" ino=14550 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8412): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8412): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8413): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/96" dev="proc" ino=14552 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8413): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8413): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8414): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/97" dev="proc" ino=14554 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8414): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8414): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8415): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/98" dev="proc" ino=14556 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8415): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8415): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8416): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/99" dev="proc" ino=14558 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8416): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8416): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8417): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/100" dev="proc" ino=14560 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8417): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8417): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8418): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/101" dev="proc" ino=14562 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8418): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8418): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8419): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/102" dev="proc" ino=14564 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8419): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8419): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8420): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/103" dev="proc" ino=14566 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8420): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8420): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8421): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/117" dev="proc" ino=14572 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8421): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8421): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8422): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/124" dev="proc" ino=14576 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8422): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8422): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8423): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/240" dev="proc" ino=14578 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8423): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8423): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8424): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/241" dev="proc" ino=14580 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8424): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8424): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8425): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/287" dev="proc" ino=16272 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8425): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8425): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8426): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/394" dev="proc" ino=16274 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8426): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8426): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8427): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/395" dev="proc" ino=16275 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8427): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8427): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8428): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/436" dev="proc" ino=10909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8428): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8428): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8429): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/484" dev="proc" ino=10911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8429): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8429): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8430): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/492" dev="proc" ino=10913 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8430): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8430): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8431): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/493" dev="proc" ino=10914 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8431): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8431): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8432): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/494" dev="proc" ino=10915 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8432): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8432): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8433): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/495" dev="proc" ino=10916 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8433): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8433): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8434): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/496" dev="proc" ino=10917 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8434): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8434): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8435): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/515" dev="proc" ino=10920 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8435): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8435): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8436): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/516" dev="proc" ino=10921 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8436): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8436): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8437): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/517" dev="proc" ino=10922 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8437): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8437): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8438): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/518" dev="proc" ino=10923 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8438): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8438): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8439): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/519" dev="proc" ino=10924 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8439): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8439): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8440): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/520" dev="proc" ino=10925 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8440): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8440): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8441): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/521" dev="proc" ino=10926 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8441): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8441): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8442): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/522" dev="proc" ino=10927 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8442): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8442): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8443): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/523" dev="proc" ino=10928 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8443): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8443): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8444): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/524" dev="proc" ino=10929 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8444): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8444): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8445): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/618" dev="proc" ino=17770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8445): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8445): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8446): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/635" dev="proc" ino=15102 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8446): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8446): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8447): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/698" dev="proc" ino=147734 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8447): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8447): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8448): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/699" dev="proc" ino=147735 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8448): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8448): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8449): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/700" dev="proc" ino=147736 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8449): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8449): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8450): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/701" dev="proc" ino=147737 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8450): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8450): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8451): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/702" dev="proc" ino=147738 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8451): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8451): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8452): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/704" dev="proc" ino=147739 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8452): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8452): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8453): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/706" dev="proc" ino=147740 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8453): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8453): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8454): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/707" dev="proc" ino=147741 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8454): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8454): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8455): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/724" dev="proc" ino=15253 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rpcbind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8455): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8455): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8456): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/726" dev="proc" ino=11161 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8456): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8456): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8457): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/728" dev="proc" ino=147742 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8457): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8457): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8458): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/751" dev="proc" ino=15285 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8458): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8458): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.717:8459): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/755" dev="proc" ino=14046 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.717:8459): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.717:8459): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8460): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/758" dev="proc" ino=15301 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8460): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8460): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8461): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/759" dev="proc" ino=15304 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8461): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8461): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8462): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/797" dev="proc" ino=25624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8462): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8462): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8463): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/802" dev="proc" ino=18960 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8463): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8463): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8464): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/1036" dev="proc" ino=14193 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8464): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8464): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8465): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/1138" dev="proc" ino=942 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8465): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8465): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8466): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/1140" dev="proc" ino=945 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8466): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8466): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8467): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/1142" dev="proc" ino=948 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8467): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8467): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8468): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/4183" dev="proc" ino=29021 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8468): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8468): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8469): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/4339" dev="proc" ino=147743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8469): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8469): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8470): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/5806" dev="proc" ino=147744 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8470): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8470): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8471): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/5982" dev="proc" ino=36898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8471): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8471): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8472): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/6595" dev="proc" ino=37243 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8472): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8472): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8473): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/6663" dev="proc" ino=147745 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8473): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8473): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8474): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/6784" dev="proc" ino=147746 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8474): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8474): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8475): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/18424" dev="proc" ino=50756 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8475): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8475): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8476): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/18436" dev="proc" ino=50742 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8476): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8476): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8477): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/18437" dev="proc" ino=147747 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8477): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8477): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8478): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22099" dev="proc" ino=147750 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8478): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8478): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8479): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22172" dev="proc" ino=68822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8479): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8479): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8480): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22178" dev="proc" ino=147751 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8480): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8480): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8481): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22179" dev="proc" ino=147752 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8481): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8481): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8482): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22180" dev="proc" ino=147753 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8482): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8482): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8483): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22181" dev="proc" ino=147754 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8483): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8483): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8484): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/22253" dev="proc" ino=69644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8484): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8484): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8485): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/23712" dev="proc" ino=147755 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8485): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8485): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8486): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26000" dev="proc" ino=147756 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8486): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8486): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8487): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26071" dev="proc" ino=147759 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8487): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8487): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8488): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26084" dev="proc" ino=147760 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8488): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8488): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8489): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26087" dev="proc" ino=147761 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8489): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8489): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8490): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26097" dev="proc" ino=93910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8490): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8490): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8491): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26102" dev="proc" ino=93988 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8491): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8491): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8492): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26409" dev="proc" ino=103441 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8492): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8492): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8493): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26413" dev="proc" ino=103511 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8493): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8493): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8494): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26416" dev="proc" ino=147763 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8494): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8494): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8495): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/26429" dev="proc" ino=101743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8495): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8495): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8496): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27076" dev="proc" ino=147765 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8496): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8496): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8497): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27159" dev="proc" ino=147766 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8497): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8497): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8498): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27162" dev="proc" ino=147767 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8498): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8498): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8499): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27233" dev="proc" ino=147768 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8499): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8499): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8500): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27236" dev="proc" ino=147769 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8500): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8500): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8501): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27326" dev="proc" ino=147770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8501): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8501): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8502): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27327" dev="proc" ino=147771 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8502): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8502): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8503): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27348" dev="proc" ino=147772 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8503): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8503): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8504): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27349" dev="proc" ino=147773 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8504): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8504): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8505): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27350" dev="proc" ino=147774 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8505): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8505): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8506): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/27989" dev="proc" ino=147775 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8506): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8506): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8507): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/28701" dev="proc" ino=147776 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8507): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8507): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8508): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/29505" dev="proc" ino=147777 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8508): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8508): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8509): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/29531" dev="proc" ino=118112 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:tuned_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8509): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8509): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8510): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33687" dev="proc" ino=147778 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8510): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8510): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8511): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33688" dev="proc" ino=147779 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8511): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8511): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8512): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33689" dev="proc" ino=147780 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8512): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8512): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8513): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33690" dev="proc" ino=147781 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8513): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8513): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8514): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33691" dev="proc" ino=147782 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8514): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8514): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8515): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33692" dev="proc" ino=147783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8515): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8515): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8516): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33693" dev="proc" ino=147784 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8516): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8516): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8517): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33694" dev="proc" ino=147785 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8517): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8517): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8518): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33695" dev="proc" ino=147786 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8518): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8518): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8519): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33696" dev="proc" ino=147787 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8519): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8519): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8520): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33697" dev="proc" ino=147788 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8520): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8520): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8521): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33750" dev="proc" ino=147789 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8521): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8521): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8522): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33751" dev="proc" ino=147790 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8522): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8522): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8523): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33752" dev="proc" ino=147791 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8523): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8523): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.718:8524): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33753" dev="proc" ino=147792 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.718:8524): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.718:8524): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8525): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33754" dev="proc" ino=147793 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8525): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8525): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8526): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33755" dev="proc" ino=147794 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8526): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8526): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8527): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33756" dev="proc" ino=147795 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8527): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8527): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8528): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33757" dev="proc" ino=147796 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8528): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8528): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8529): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33758" dev="proc" ino=147797 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8529): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8529): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8530): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33759" dev="proc" ino=147798 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8530): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8530): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8531): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33760" dev="proc" ino=147799 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8531): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8531): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8532): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33761" dev="proc" ino=147800 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8532): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8532): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8533): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33762" dev="proc" ino=147801 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8533): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8533): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8534): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33763" dev="proc" ino=147802 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8534): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8534): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8535): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33764" dev="proc" ino=147803 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8535): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8535): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8536): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33765" dev="proc" ino=147804 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8536): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8536): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8537): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33766" dev="proc" ino=147805 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8537): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8537): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8538): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33767" dev="proc" ino=147806 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8538): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8538): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8539): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33768" dev="proc" ino=147807 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8539): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8539): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8540): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33769" dev="proc" ino=147808 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8540): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8540): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8541): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33770" dev="proc" ino=147809 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8541): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8541): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8542): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33771" dev="proc" ino=147810 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8542): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8542): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8543): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33772" dev="proc" ino=147811 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8543): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8543): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8544): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33773" dev="proc" ino=147812 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8544): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8544): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8545): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33774" dev="proc" ino=147813 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8545): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8545): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8546): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33775" dev="proc" ino=147814 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8546): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8546): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8547): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33776" dev="proc" ino=147815 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8547): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8547): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8548): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33777" dev="proc" ino=147816 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8548): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8548): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8549): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33778" dev="proc" ino=147817 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8549): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8549): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8550): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33779" dev="proc" ino=147818 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8550): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8550): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8551): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33780" dev="proc" ino=147819 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8551): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8551): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8552): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33781" dev="proc" ino=147820 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8552): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8552): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8553): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33782" dev="proc" ino=147821 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8553): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8553): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8554): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33783" dev="proc" ino=147822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8554): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8554): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8555): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33784" dev="proc" ino=147823 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8555): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8555): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8556): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33785" dev="proc" ino=147824 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8556): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8556): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8557): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33786" dev="proc" ino=147825 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8557): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8557): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8558): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33787" dev="proc" ino=147826 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8558): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8558): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8559): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33788" dev="proc" ino=147827 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8559): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8559): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8560): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33789" dev="proc" ino=147828 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8560): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8560): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8561): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33790" dev="proc" ino=147829 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8561): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8561): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8562): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33791" dev="proc" ino=147830 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8562): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8562): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8563): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33792" dev="proc" ino=147831 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8563): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8563): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8564): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33793" dev="proc" ino=147832 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8564): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8564): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8565): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33794" dev="proc" ino=147833 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8565): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8565): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8566): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33795" dev="proc" ino=147834 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8566): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8566): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8567): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33796" dev="proc" ino=147835 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8567): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8567): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8568): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33797" dev="proc" ino=147836 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8568): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8568): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8569): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33798" dev="proc" ino=147837 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8569): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8569): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8570): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33799" dev="proc" ino=147838 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8570): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8570): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8571): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33800" dev="proc" ino=147839 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8571): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8571): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8572): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/33801" dev="proc" ino=147840 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8572): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8572): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8573): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34656" dev="proc" ino=147841 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8573): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8573): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8574): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34657" dev="proc" ino=147842 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8574): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8574): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8575): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34658" dev="proc" ino=147843 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8575): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8575): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8576): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34659" dev="proc" ino=147844 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8576): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8576): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8577): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34660" dev="proc" ino=147845 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8577): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8577): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8578): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34661" dev="proc" ino=147846 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8578): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8578): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8579): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34662" dev="proc" ino=147847 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8579): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8579): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8580): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34663" dev="proc" ino=147848 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8580): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8580): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8581): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34664" dev="proc" ino=147849 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8581): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8581): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8582): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34665" dev="proc" ino=147850 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8582): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8582): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8583): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34666" dev="proc" ino=147851 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8583): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8583): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8584): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34667" dev="proc" ino=147852 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8584): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8584): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8585): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34668" dev="proc" ino=147853 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8585): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8585): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8586): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34669" dev="proc" ino=147854 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8586): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8586): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8587): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34670" dev="proc" ino=147855 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8587): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8587): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8588): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34671" dev="proc" ino=147856 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8588): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8588): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8589): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34672" dev="proc" ino=147857 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8589): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8589): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8590): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34673" dev="proc" ino=147858 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8590): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8590): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8591): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34674" dev="proc" ino=147859 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8591): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8591): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8592): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34675" dev="proc" ino=147860 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8592): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8592): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8593): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34676" dev="proc" ino=147861 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8593): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8593): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8594): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34677" dev="proc" ino=147862 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8594): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8594): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8595): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34678" dev="proc" ino=147863 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8595): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8595): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8596): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34679" dev="proc" ino=147864 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8596): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8596): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8597): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34680" dev="proc" ino=147865 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8597): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8597): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8598): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34681" dev="proc" ino=147866 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8598): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8598): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8599): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34682" dev="proc" ino=147867 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8599): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8599): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8600): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34683" dev="proc" ino=147868 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8600): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8600): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8601): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34684" dev="proc" ino=147869 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8601): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8601): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8602): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34685" dev="proc" ino=147870 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8602): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8602): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8603): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34686" dev="proc" ino=147871 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8603): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8603): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8604): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34687" dev="proc" ino=147872 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8604): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8604): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8605): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34688" dev="proc" ino=147873 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8605): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8605): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8606): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34689" dev="proc" ino=147874 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8606): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8606): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8607): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34690" dev="proc" ino=147875 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8607): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8607): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8608): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34691" dev="proc" ino=147876 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8608): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8608): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8609): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34692" dev="proc" ino=147877 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8609): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8609): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8610): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34693" dev="proc" ino=147878 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8610): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8610): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8611): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34694" dev="proc" ino=147879 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8611): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8611): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8612): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34695" dev="proc" ino=147880 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8612): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8612): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8613): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34696" dev="proc" ino=147881 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8613): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8613): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8614): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34697" dev="proc" ino=147882 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8614): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8614): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8615): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34698" dev="proc" ino=147883 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8615): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8615): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8616): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34699" dev="proc" ino=147884 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8616): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8616): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.719:8617): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34700" dev="proc" ino=147885 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.719:8617): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.719:8617): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8618): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34701" dev="proc" ino=147886 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8618): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8618): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8619): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34702" dev="proc" ino=147887 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8619): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8619): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8620): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34703" dev="proc" ino=147888 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8620): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8620): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8621): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34704" dev="proc" ino=147889 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8621): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8621): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8622): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34705" dev="proc" ino=147890 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8622): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8622): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8623): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34706" dev="proc" ino=147891 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8623): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8623): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8624): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34707" dev="proc" ino=147892 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8624): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8624): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8625): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34708" dev="proc" ino=147893 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8625): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8625): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8626): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34709" dev="proc" ino=147894 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8626): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8626): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8627): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34710" dev="proc" ino=147895 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8627): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8627): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8628): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34711" dev="proc" ino=147896 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8628): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8628): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8629): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34712" dev="proc" ino=147897 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8629): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8629): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8630): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34713" dev="proc" ino=147898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8630): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8630): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8631): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34714" dev="proc" ino=147899 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8631): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8631): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8632): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34715" dev="proc" ino=147900 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8632): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8632): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8633): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34716" dev="proc" ino=147901 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8633): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8633): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8634): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34717" dev="proc" ino=147902 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8634): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8634): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8635): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34718" dev="proc" ino=147903 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8635): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8635): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8636): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34719" dev="proc" ino=147904 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8636): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8636): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8637): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34720" dev="proc" ino=147905 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8637): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8637): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8638): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34721" dev="proc" ino=147906 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8638): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8638): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8639): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34722" dev="proc" ino=147907 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8639): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8639): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8640): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34723" dev="proc" ino=147908 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8640): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8640): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8641): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/34766" dev="proc" ino=147909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8641): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8641): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8642): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/35869" dev="proc" ino=147910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8642): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8642): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8643): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/35934" dev="proc" ino=147911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8643): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8643): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8644): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/36254" dev="proc" ino=147666 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8644): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8644): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8645): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37193" dev="proc" ino=156607 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8645): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8645): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8646): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37739" dev="proc" ino=158783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8646): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8646): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8647): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37740" dev="proc" ino=157091 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8647): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8647): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8648): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37962" dev="proc" ino=156608 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8648): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8648): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8649): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37963" dev="proc" ino=156609 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8649): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8649): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8650): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37964" dev="proc" ino=156610 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8650): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8650): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8651): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37965" dev="proc" ino=156611 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8651): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8651): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8652): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37966" dev="proc" ino=156612 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8652): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8652): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8653): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37967" dev="proc" ino=156613 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8653): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8653): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8654): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37968" dev="proc" ino=156614 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8654): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8654): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8655): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37969" dev="proc" ino=156615 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8655): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8655): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8656): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37970" dev="proc" ino=156616 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8656): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8656): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8657): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37971" dev="proc" ino=156617 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8657): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8657): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8658): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37972" dev="proc" ino=156618 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8658): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8658): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8659): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37973" dev="proc" ino=156619 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8659): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8659): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8660): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37974" dev="proc" ino=156620 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8660): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8660): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8661): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37975" dev="proc" ino=156621 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8661): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8661): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8662): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37976" dev="proc" ino=156622 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8662): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8662): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8663): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37977" dev="proc" ino=156623 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8663): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8663): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8664): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37978" dev="proc" ino=156624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8664): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8664): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8665): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37979" dev="proc" ino=156625 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8665): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8665): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8666): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37980" dev="proc" ino=156626 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8666): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8666): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8667): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37981" dev="proc" ino=156627 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8667): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8667): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8668): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37982" dev="proc" ino=156628 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8668): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8668): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8669): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37983" dev="proc" ino=156629 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8669): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8669): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8670): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37984" dev="proc" ino=156630 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8670): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8670): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8671): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37985" dev="proc" ino=156631 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8671): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8671): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8672): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37986" dev="proc" ino=156632 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8672): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8672): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8673): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37987" dev="proc" ino=156633 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8673): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8673): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8674): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37988" dev="proc" ino=156634 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8674): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8674): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8675): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37989" dev="proc" ino=156635 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8675): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8675): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8676): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37990" dev="proc" ino=156636 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8676): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8676): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8677): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37991" dev="proc" ino=156637 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8677): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8677): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8678): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37992" dev="proc" ino=156638 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8678): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8678): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8679): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37993" dev="proc" ino=156639 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8679): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8679): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8680): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37994" dev="proc" ino=156640 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8680): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8680): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8681): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37995" dev="proc" ino=156641 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8681): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8681): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8682): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37996" dev="proc" ino=156642 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8682): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8682): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8683): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37997" dev="proc" ino=156643 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8683): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8683): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8684): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37998" dev="proc" ino=156644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8684): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8684): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8685): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/37999" dev="proc" ino=156645 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8685): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8685): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8686): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38000" dev="proc" ino=156646 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8686): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8686): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8687): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38001" dev="proc" ino=156647 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8687): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8687): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8688): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38002" dev="proc" ino=156648 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8688): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8688): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8689): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38003" dev="proc" ino=156649 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8689): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8689): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8690): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38004" dev="proc" ino=156650 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8690): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8690): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8691): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38005" dev="proc" ino=156651 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8691): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8691): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8692): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38006" dev="proc" ino=156652 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8692): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8692): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8693): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38007" dev="proc" ino=156653 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8693): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8693): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8694): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38008" dev="proc" ino=156654 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8694): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8694): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8695): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38009" dev="proc" ino=156655 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8695): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8695): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8696): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38010" dev="proc" ino=156656 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8696): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8696): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8697): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38030" dev="proc" ino=156657 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8697): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8697): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8698): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38338" dev="proc" ino=158500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8698): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8698): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8699): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38555" dev="proc" ino=160326 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8699): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8699): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8700): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38556" dev="proc" ino=160336 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8700): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8700): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8701): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38557" dev="proc" ino=164129 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8701): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8701): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8702): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38558" dev="proc" ino=164137 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8702): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8702): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8703): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38559" dev="proc" ino=164155 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8703): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8703): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8704): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38560" dev="proc" ino=164147 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8704): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8704): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8705): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38561" dev="proc" ino=164163 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8705): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8705): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.720:8706): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/38621" dev="proc" ino=160387 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.720:8706): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.720:8706): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8707): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39461" dev="proc" ino=161299 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8707): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8707): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8708): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39486" dev="proc" ino=161340 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8708): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8708): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8709): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39502" dev="proc" ino=161366 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8709): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8709): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8710): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39504" dev="proc" ino=170053 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8710): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8710): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8711): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39512" dev="proc" ino=161381 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8711): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8711): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8712): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39525" dev="proc" ino=165630 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8712): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8712): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8713): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39527" dev="proc" ino=166481 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8713): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8713): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252596.721:8714): avc:  denied  { getattr } for  pid=39546 comm="pkill" path="/proc/39529" dev="proc" ino=166489 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252596.721:8714): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=555b7fbe3030 a2=7f6f17ca2aa0 a3=0 items=0 ppid=39543 pid=39546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252596.721:8714): proctitle=706B696C6C002D55535231006874747064
type=USER_END msg=audit(1781252596.851:8715): pid=39525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252596.852:8716): pid=39525 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252596.856:8717): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252596.856:8718): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252597.199:8719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252597.199:8720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252597.260:8721): pid=39561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252597.261:8722): pid=39561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E787A676E627676766D6C666C777A6A6B7972636A64677762696E646E75666F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252597.262:8723): pid=39561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252597.265:8724): pid=39561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=AVC msg=audit(1781252598.497:8725): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/2" dev="proc" ino=14380 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8725): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8725): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8726): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/3" dev="proc" ino=14382 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8726): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8726): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8727): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/4" dev="proc" ino=14384 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8727): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8727): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8728): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/5" dev="proc" ino=14386 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8728): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8728): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8729): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/6" dev="proc" ino=14388 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8729): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8729): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8730): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/8" dev="proc" ino=14392 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8730): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8730): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8731): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/10" dev="proc" ino=14396 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8731): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8731): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8732): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/12" dev="proc" ino=14400 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8732): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8732): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8733): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/13" dev="proc" ino=14402 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8733): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8733): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8734): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/14" dev="proc" ino=14404 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8734): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8734): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8735): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/15" dev="proc" ino=14406 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8735): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8735): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8736): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/16" dev="proc" ino=14408 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8736): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8736): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8737): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/17" dev="proc" ino=14410 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8737): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8737): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8738): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/19" dev="proc" ino=14414 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8738): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8738): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8739): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/20" dev="proc" ino=14416 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8739): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8739): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8740): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/21" dev="proc" ino=14418 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8740): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8740): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8741): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22" dev="proc" ino=14420 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8741): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8741): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8742): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/23" dev="proc" ino=14422 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8742): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8742): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8743): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/24" dev="proc" ino=14424 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8743): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8743): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8744): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/25" dev="proc" ino=14426 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8744): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8744): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8745): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26" dev="proc" ino=14428 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8745): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8745): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8746): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27" dev="proc" ino=14430 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8746): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8746): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8747): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/29" dev="proc" ino=14434 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8747): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8747): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8748): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/30" dev="proc" ino=14436 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8748): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8748): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8749): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/31" dev="proc" ino=14438 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8749): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8749): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8750): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/32" dev="proc" ino=14440 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8750): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8750): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8751): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34" dev="proc" ino=14444 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8751): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8751): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8752): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/35" dev="proc" ino=14446 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8752): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8752): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8753): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/36" dev="proc" ino=14448 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8753): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8753): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8754): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37" dev="proc" ino=14450 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8754): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8754): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8755): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39" dev="proc" ino=14454 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8755): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8755): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8756): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/40" dev="proc" ino=14456 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8756): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8756): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.497:8757): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/41" dev="proc" ino=14458 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.497:8757): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.497:8757): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8758): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/42" dev="proc" ino=14460 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8758): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8758): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8759): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/44" dev="proc" ino=14464 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8759): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8759): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8760): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/45" dev="proc" ino=14466 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8760): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8760): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8761): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/46" dev="proc" ino=14468 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8761): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8761): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8762): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/47" dev="proc" ino=14470 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8762): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8762): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8763): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/49" dev="proc" ino=14474 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8763): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8763): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8764): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/50" dev="proc" ino=14476 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8764): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8764): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8765): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/51" dev="proc" ino=14478 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8765): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8765): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8766): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/52" dev="proc" ino=14480 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8766): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8766): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8767): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/54" dev="proc" ino=14484 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8767): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8767): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8768): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/62" dev="proc" ino=14498 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8768): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8768): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8769): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/63" dev="proc" ino=14500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8769): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8769): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8770): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/64" dev="proc" ino=14502 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8770): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8770): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8771): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/65" dev="proc" ino=14504 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8771): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8771): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8772): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/66" dev="proc" ino=14506 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8772): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8772): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8773): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/67" dev="proc" ino=14508 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8773): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8773): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8774): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/68" dev="proc" ino=14510 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8774): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8774): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8775): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/69" dev="proc" ino=14512 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8775): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8775): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8776): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/70" dev="proc" ino=14514 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8776): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8776): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8777): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/71" dev="proc" ino=14516 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8777): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8777): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8778): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/72" dev="proc" ino=14518 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8778): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8778): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8779): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/73" dev="proc" ino=14520 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8779): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8779): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8780): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/74" dev="proc" ino=14522 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8780): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8780): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8781): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/75" dev="proc" ino=14524 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8781): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8781): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8782): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/76" dev="proc" ino=14526 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8782): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8782): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8783): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/77" dev="proc" ino=14528 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8783): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8783): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8784): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/78" dev="proc" ino=14530 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8784): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8784): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8785): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/79" dev="proc" ino=14532 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8785): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8785): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8786): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/80" dev="proc" ino=14534 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8786): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8786): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8787): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/82" dev="proc" ino=14538 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8787): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8787): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8788): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/84" dev="proc" ino=14540 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8788): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8788): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8789): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/89" dev="proc" ino=14544 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8789): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8789): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8790): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/94" dev="proc" ino=14548 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8790): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8790): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8791): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/95" dev="proc" ino=14550 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8791): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8791): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8792): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/96" dev="proc" ino=14552 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8792): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8792): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8793): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/97" dev="proc" ino=14554 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8793): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8793): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8794): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/98" dev="proc" ino=14556 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8794): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8794): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8795): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/99" dev="proc" ino=14558 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8795): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8795): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8796): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/100" dev="proc" ino=14560 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8796): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8796): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8797): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/101" dev="proc" ino=14562 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8797): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8797): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8798): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/102" dev="proc" ino=14564 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8798): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8798): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8799): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/103" dev="proc" ino=14566 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8799): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8799): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8800): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/117" dev="proc" ino=14572 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8800): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8800): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8801): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/124" dev="proc" ino=14576 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8801): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8801): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8802): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/240" dev="proc" ino=14578 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8802): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8802): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8803): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/241" dev="proc" ino=14580 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8803): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8803): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8804): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/287" dev="proc" ino=16272 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8804): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8804): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8805): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/394" dev="proc" ino=16274 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8805): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8805): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8806): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/395" dev="proc" ino=16275 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8806): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8806): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8807): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/436" dev="proc" ino=10909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8807): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8807): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8808): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/484" dev="proc" ino=10911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8808): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8808): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8809): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/492" dev="proc" ino=10913 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8809): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8809): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8810): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/493" dev="proc" ino=10914 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8810): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8810): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8811): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/494" dev="proc" ino=10915 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8811): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8811): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8812): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/495" dev="proc" ino=10916 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8812): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8812): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8813): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/496" dev="proc" ino=10917 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8813): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8813): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8814): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/515" dev="proc" ino=10920 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8814): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8814): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8815): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/516" dev="proc" ino=10921 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8815): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8815): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8816): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/517" dev="proc" ino=10922 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8816): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8816): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8817): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/518" dev="proc" ino=10923 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8817): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8817): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8818): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/519" dev="proc" ino=10924 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8818): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8818): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8819): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/520" dev="proc" ino=10925 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8819): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8819): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8820): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/521" dev="proc" ino=10926 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8820): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8820): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8821): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/522" dev="proc" ino=10927 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8821): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8821): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8822): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/523" dev="proc" ino=10928 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8822): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8822): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8823): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/524" dev="proc" ino=10929 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8823): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8823): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8824): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/618" dev="proc" ino=17770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8824): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8824): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8825): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/635" dev="proc" ino=15102 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8825): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8825): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8826): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/698" dev="proc" ino=147734 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8826): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8826): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8827): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/699" dev="proc" ino=147735 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8827): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8827): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8828): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/700" dev="proc" ino=147736 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8828): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8828): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8829): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/701" dev="proc" ino=147737 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8829): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8829): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8830): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/702" dev="proc" ino=147738 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8830): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8830): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8831): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/704" dev="proc" ino=147739 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8831): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8831): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8832): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/706" dev="proc" ino=147740 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8832): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8832): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8833): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/707" dev="proc" ino=147741 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8833): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8833): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8834): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/724" dev="proc" ino=15253 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rpcbind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8834): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8834): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8835): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/726" dev="proc" ino=11161 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8835): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8835): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8836): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/728" dev="proc" ino=147742 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8836): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8836): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8837): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/751" dev="proc" ino=15285 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8837): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8837): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8838): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/755" dev="proc" ino=14046 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8838): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8838): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8839): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/758" dev="proc" ino=15301 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8839): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8839): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8840): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/759" dev="proc" ino=15304 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8840): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8840): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8841): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/797" dev="proc" ino=25624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8841): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8841): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8842): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/802" dev="proc" ino=18960 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8842): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8842): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8843): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/1036" dev="proc" ino=14193 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8843): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8843): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8844): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/1138" dev="proc" ino=942 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8844): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8844): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8845): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/1140" dev="proc" ino=945 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8845): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8845): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8846): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/1142" dev="proc" ino=948 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8846): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8846): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8847): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/4183" dev="proc" ino=29021 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8847): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8847): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8848): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/4339" dev="proc" ino=147743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8848): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8848): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8849): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/5806" dev="proc" ino=147744 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8849): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8849): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8850): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/5982" dev="proc" ino=36898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8850): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8850): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8851): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/6595" dev="proc" ino=37243 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8851): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8851): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8852): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/6663" dev="proc" ino=147745 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8852): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8852): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8853): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/6784" dev="proc" ino=147746 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8853): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8853): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8854): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/18424" dev="proc" ino=50756 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8854): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8854): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8855): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/18436" dev="proc" ino=50742 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8855): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8855): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8856): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/18437" dev="proc" ino=147747 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8856): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8856): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8857): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22099" dev="proc" ino=147750 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8857): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8857): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8858): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22172" dev="proc" ino=68822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8858): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8858): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8859): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22178" dev="proc" ino=147751 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8859): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8859): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8860): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22179" dev="proc" ino=147752 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8860): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8860): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.498:8861): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22180" dev="proc" ino=147753 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.498:8861): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.498:8861): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8862): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22181" dev="proc" ino=147754 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8862): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8862): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8863): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/22253" dev="proc" ino=69644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8863): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8863): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8864): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/23712" dev="proc" ino=147755 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8864): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8864): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8865): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26000" dev="proc" ino=147756 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8865): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8865): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8866): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26071" dev="proc" ino=147759 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8866): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8866): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8867): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26084" dev="proc" ino=147760 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8867): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8867): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8868): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26087" dev="proc" ino=147761 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8868): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8868): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8869): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26097" dev="proc" ino=93910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8869): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8869): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8870): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26102" dev="proc" ino=93988 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8870): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8870): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8871): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26409" dev="proc" ino=103441 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8871): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8871): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8872): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26413" dev="proc" ino=103511 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8872): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8872): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8873): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26416" dev="proc" ino=147763 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8873): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8873): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8874): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/26429" dev="proc" ino=101743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8874): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8874): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8875): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27076" dev="proc" ino=147765 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8875): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8875): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8876): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27159" dev="proc" ino=147766 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8876): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8876): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8877): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27162" dev="proc" ino=147767 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8877): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8877): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8878): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27233" dev="proc" ino=147768 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8878): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8878): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8879): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27236" dev="proc" ino=147769 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8879): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8879): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8880): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27326" dev="proc" ino=147770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8880): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8880): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8881): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27327" dev="proc" ino=147771 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8881): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8881): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8882): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27348" dev="proc" ino=147772 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8882): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8882): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8883): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27349" dev="proc" ino=147773 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8883): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8883): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8884): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27350" dev="proc" ino=147774 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8884): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8884): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8885): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/27989" dev="proc" ino=147775 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8885): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8885): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8886): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/28701" dev="proc" ino=147776 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8886): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8886): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8887): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/29505" dev="proc" ino=147777 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8887): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8887): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8888): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/29531" dev="proc" ino=118112 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:tuned_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8888): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8888): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8889): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33687" dev="proc" ino=147778 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8889): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8889): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8890): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33688" dev="proc" ino=147779 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8890): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8890): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8891): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33689" dev="proc" ino=147780 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8891): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8891): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8892): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33690" dev="proc" ino=147781 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8892): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8892): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8893): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33691" dev="proc" ino=147782 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8893): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8893): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8894): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33692" dev="proc" ino=147783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8894): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8894): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8895): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33693" dev="proc" ino=147784 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8895): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8895): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8896): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33694" dev="proc" ino=147785 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8896): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8896): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8897): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33695" dev="proc" ino=147786 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8897): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8897): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8898): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33696" dev="proc" ino=147787 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8898): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8898): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8899): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33697" dev="proc" ino=147788 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8899): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8899): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8900): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33750" dev="proc" ino=147789 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8900): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8900): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8901): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33751" dev="proc" ino=147790 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8901): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8901): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8902): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33752" dev="proc" ino=147791 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8902): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8902): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8903): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33753" dev="proc" ino=147792 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8903): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8903): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8904): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33754" dev="proc" ino=147793 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8904): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8904): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8905): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33755" dev="proc" ino=147794 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8905): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8905): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8906): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33756" dev="proc" ino=147795 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8906): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8906): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8907): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33757" dev="proc" ino=147796 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8907): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8907): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8908): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33758" dev="proc" ino=147797 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8908): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8908): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8909): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33759" dev="proc" ino=147798 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8909): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8909): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8910): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33760" dev="proc" ino=147799 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8910): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8910): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8911): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33761" dev="proc" ino=147800 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8911): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8911): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8912): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33762" dev="proc" ino=147801 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8912): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8912): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8913): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33763" dev="proc" ino=147802 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8913): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8913): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8914): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33764" dev="proc" ino=147803 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8914): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8914): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8915): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33765" dev="proc" ino=147804 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8915): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8915): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8916): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33766" dev="proc" ino=147805 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8916): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8916): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8917): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33767" dev="proc" ino=147806 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8917): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8917): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8918): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33768" dev="proc" ino=147807 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8918): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8918): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8919): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33769" dev="proc" ino=147808 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8919): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8919): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8920): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33770" dev="proc" ino=147809 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8920): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8920): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8921): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33771" dev="proc" ino=147810 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8921): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8921): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8922): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33772" dev="proc" ino=147811 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8922): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8922): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8923): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33773" dev="proc" ino=147812 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8923): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8923): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8924): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33774" dev="proc" ino=147813 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8924): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8924): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8925): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33775" dev="proc" ino=147814 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8925): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8925): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8926): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33776" dev="proc" ino=147815 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8926): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8926): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8927): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33777" dev="proc" ino=147816 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8927): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8927): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8928): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33778" dev="proc" ino=147817 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8928): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8928): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8929): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33779" dev="proc" ino=147818 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8929): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8929): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8930): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33780" dev="proc" ino=147819 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8930): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8930): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8931): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33781" dev="proc" ino=147820 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8931): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8931): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8932): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33782" dev="proc" ino=147821 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8932): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8932): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8933): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33783" dev="proc" ino=147822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8933): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8933): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8934): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33784" dev="proc" ino=147823 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8934): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8934): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8935): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33785" dev="proc" ino=147824 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8935): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8935): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8936): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33786" dev="proc" ino=147825 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8936): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8936): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8937): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33787" dev="proc" ino=147826 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8937): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8937): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8938): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33788" dev="proc" ino=147827 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8938): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8938): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8939): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33789" dev="proc" ino=147828 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8939): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8939): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8940): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33790" dev="proc" ino=147829 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8940): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8940): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8941): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33791" dev="proc" ino=147830 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8941): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8941): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8942): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33792" dev="proc" ino=147831 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8942): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8942): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8943): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33793" dev="proc" ino=147832 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8943): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8943): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8944): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33794" dev="proc" ino=147833 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8944): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8944): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8945): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33795" dev="proc" ino=147834 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8945): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8945): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8946): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33796" dev="proc" ino=147835 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8946): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8946): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8947): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33797" dev="proc" ino=147836 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8947): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8947): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8948): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33798" dev="proc" ino=147837 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8948): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8948): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8949): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33799" dev="proc" ino=147838 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8949): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8949): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8950): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33800" dev="proc" ino=147839 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8950): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8950): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8951): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/33801" dev="proc" ino=147840 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8951): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8951): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8952): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34656" dev="proc" ino=147841 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8952): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8952): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8953): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34657" dev="proc" ino=147842 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8953): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8953): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8954): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34658" dev="proc" ino=147843 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8954): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8954): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8955): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34659" dev="proc" ino=147844 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8955): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8955): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8956): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34660" dev="proc" ino=147845 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8956): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8956): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8957): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34661" dev="proc" ino=147846 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8957): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8957): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8958): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34662" dev="proc" ino=147847 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8958): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8958): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8959): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34663" dev="proc" ino=147848 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8959): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8959): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8960): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34664" dev="proc" ino=147849 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8960): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8960): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8961): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34665" dev="proc" ino=147850 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8961): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8961): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8962): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34666" dev="proc" ino=147851 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8962): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8962): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8963): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34667" dev="proc" ino=147852 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8963): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8963): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8964): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34668" dev="proc" ino=147853 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8964): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8964): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8965): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34669" dev="proc" ino=147854 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8965): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8965): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8966): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34670" dev="proc" ino=147855 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8966): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8966): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8967): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34671" dev="proc" ino=147856 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8967): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8967): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8968): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34672" dev="proc" ino=147857 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8968): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8968): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8969): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34673" dev="proc" ino=147858 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8969): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8969): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8970): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34674" dev="proc" ino=147859 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8970): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8970): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8971): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34675" dev="proc" ino=147860 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8971): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8971): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8972): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34676" dev="proc" ino=147861 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8972): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8972): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8973): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34677" dev="proc" ino=147862 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8973): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8973): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8974): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34678" dev="proc" ino=147863 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8974): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8974): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8975): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34679" dev="proc" ino=147864 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8975): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8975): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8976): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34680" dev="proc" ino=147865 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8976): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8976): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8977): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34681" dev="proc" ino=147866 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8977): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8977): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8978): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34682" dev="proc" ino=147867 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8978): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8978): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8979): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34683" dev="proc" ino=147868 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8979): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8979): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8980): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34684" dev="proc" ino=147869 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8980): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8980): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8981): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34685" dev="proc" ino=147870 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8981): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8981): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8982): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34686" dev="proc" ino=147871 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8982): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8982): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8983): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34687" dev="proc" ino=147872 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8983): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8983): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8984): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34688" dev="proc" ino=147873 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8984): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8984): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8985): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34689" dev="proc" ino=147874 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8985): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8985): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8986): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34690" dev="proc" ino=147875 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8986): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8986): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8987): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34691" dev="proc" ino=147876 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8987): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8987): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8988): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34692" dev="proc" ino=147877 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8988): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8988): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8989): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34693" dev="proc" ino=147878 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8989): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8989): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8990): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34694" dev="proc" ino=147879 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8990): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8990): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8991): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34695" dev="proc" ino=147880 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8991): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8991): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8992): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34696" dev="proc" ino=147881 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8992): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8992): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.499:8993): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34697" dev="proc" ino=147882 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.499:8993): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.499:8993): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:8994): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34698" dev="proc" ino=147883 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:8994): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:8994): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:8995): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34699" dev="proc" ino=147884 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:8995): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:8995): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:8996): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34700" dev="proc" ino=147885 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:8996): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:8996): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:8997): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34701" dev="proc" ino=147886 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:8997): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:8997): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:8998): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34702" dev="proc" ino=147887 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:8998): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:8998): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:8999): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34703" dev="proc" ino=147888 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:8999): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:8999): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9000): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34704" dev="proc" ino=147889 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9000): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9000): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9001): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34705" dev="proc" ino=147890 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9001): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9001): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9002): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34706" dev="proc" ino=147891 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9002): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9002): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9003): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34707" dev="proc" ino=147892 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9003): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9003): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9004): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34708" dev="proc" ino=147893 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9004): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9004): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9005): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34709" dev="proc" ino=147894 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9005): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9005): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9006): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34710" dev="proc" ino=147895 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9006): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9006): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9007): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34711" dev="proc" ino=147896 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9007): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9007): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9008): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34712" dev="proc" ino=147897 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9008): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9008): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9009): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34713" dev="proc" ino=147898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9009): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9009): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9010): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34714" dev="proc" ino=147899 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9010): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9010): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9011): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34715" dev="proc" ino=147900 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9011): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9011): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9012): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34716" dev="proc" ino=147901 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9012): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9012): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9013): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34717" dev="proc" ino=147902 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9013): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9013): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9014): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34718" dev="proc" ino=147903 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9014): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9014): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9015): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34719" dev="proc" ino=147904 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9015): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9015): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9016): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34720" dev="proc" ino=147905 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9016): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9016): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9017): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34721" dev="proc" ino=147906 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9017): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9017): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9018): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34722" dev="proc" ino=147907 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9018): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9018): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9019): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34723" dev="proc" ino=147908 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9019): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9019): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9020): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/34766" dev="proc" ino=147909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9020): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9020): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9021): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/35869" dev="proc" ino=147910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9021): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9021): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9022): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/35934" dev="proc" ino=147911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9022): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9022): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9023): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/36254" dev="proc" ino=147666 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9023): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9023): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9024): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37193" dev="proc" ino=156607 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9024): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9024): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9025): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37739" dev="proc" ino=158783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9025): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9025): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9026): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37740" dev="proc" ino=157091 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9026): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9026): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9027): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37962" dev="proc" ino=156608 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9027): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9027): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9028): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37963" dev="proc" ino=156609 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9028): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9028): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9029): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37964" dev="proc" ino=156610 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9029): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9029): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9030): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37965" dev="proc" ino=156611 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9030): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9030): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9031): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37966" dev="proc" ino=156612 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9031): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9031): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9032): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37967" dev="proc" ino=156613 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9032): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9032): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9033): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37968" dev="proc" ino=156614 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9033): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9033): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9034): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37969" dev="proc" ino=156615 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9034): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9034): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9035): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37970" dev="proc" ino=156616 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9035): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9035): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9036): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37971" dev="proc" ino=156617 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9036): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9036): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9037): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37972" dev="proc" ino=156618 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9037): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9037): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9038): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37973" dev="proc" ino=156619 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9038): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9038): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9039): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37974" dev="proc" ino=156620 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9039): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9039): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9040): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37975" dev="proc" ino=156621 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9040): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9040): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9041): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37976" dev="proc" ino=156622 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9041): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9041): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9042): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37977" dev="proc" ino=156623 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9042): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9042): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9043): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37978" dev="proc" ino=156624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9043): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9043): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9044): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37979" dev="proc" ino=156625 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9044): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9044): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9045): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37980" dev="proc" ino=156626 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9045): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9045): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9046): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37981" dev="proc" ino=156627 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9046): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9046): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9047): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37982" dev="proc" ino=156628 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9047): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9047): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9048): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37983" dev="proc" ino=156629 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9048): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9048): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9049): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37984" dev="proc" ino=156630 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9049): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9049): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9050): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37985" dev="proc" ino=156631 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9050): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9050): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9051): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37986" dev="proc" ino=156632 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9051): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9051): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9052): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37987" dev="proc" ino=156633 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9052): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9052): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9053): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37988" dev="proc" ino=156634 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9053): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9053): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9054): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37989" dev="proc" ino=156635 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9054): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9054): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9055): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37990" dev="proc" ino=156636 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9055): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9055): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9056): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37991" dev="proc" ino=156637 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9056): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9056): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9057): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37992" dev="proc" ino=156638 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9057): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9057): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9058): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37993" dev="proc" ino=156639 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9058): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9058): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9059): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37994" dev="proc" ino=156640 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9059): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9059): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9060): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37995" dev="proc" ino=156641 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9060): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9060): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9061): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37996" dev="proc" ino=156642 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9061): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9061): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9062): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37997" dev="proc" ino=156643 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9062): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9062): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9063): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37998" dev="proc" ino=156644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9063): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9063): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9064): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/37999" dev="proc" ino=156645 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9064): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9064): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9065): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38000" dev="proc" ino=156646 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9065): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9065): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9066): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38001" dev="proc" ino=156647 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9066): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9066): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9067): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38002" dev="proc" ino=156648 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9067): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9067): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9068): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38003" dev="proc" ino=156649 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9068): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9068): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9069): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38004" dev="proc" ino=156650 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9069): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9069): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9070): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38005" dev="proc" ino=156651 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9070): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9070): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9071): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38006" dev="proc" ino=156652 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9071): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9071): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9072): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38007" dev="proc" ino=156653 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9072): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9072): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9073): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38008" dev="proc" ino=156654 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9073): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9073): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9074): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38009" dev="proc" ino=156655 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9074): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9074): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9075): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38010" dev="proc" ino=156656 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9075): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9075): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9076): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38030" dev="proc" ino=156657 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9076): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9076): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9077): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38338" dev="proc" ino=158500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9077): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9077): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9078): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38555" dev="proc" ino=160326 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9078): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9078): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9079): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38556" dev="proc" ino=160336 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9079): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9079): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9080): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38557" dev="proc" ino=164129 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9080): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9080): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9081): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38558" dev="proc" ino=164137 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9081): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9081): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9082): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38559" dev="proc" ino=164155 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9082): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9082): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9083): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38560" dev="proc" ino=164147 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9083): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9083): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9084): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38561" dev="proc" ino=164163 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9084): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9084): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9085): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/38621" dev="proc" ino=160387 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9085): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9085): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9086): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39461" dev="proc" ino=161299 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9086): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9086): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9087): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39486" dev="proc" ino=161340 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9087): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9087): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9088): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39502" dev="proc" ino=161366 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9088): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9088): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9089): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39504" dev="proc" ino=170053 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9089): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9089): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9090): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39548" dev="proc" ino=165683 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9090): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9090): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9091): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39561" dev="proc" ino=169340 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9091): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9091): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9092): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39563" dev="proc" ino=168470 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9092): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9092): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252598.500:9093): avc:  denied  { getattr } for  pid=39582 comm="pkill" path="/proc/39565" dev="proc" ino=169370 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252598.500:9093): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=55f055337030 a2=7fc5b8e7eaa0 a3=0 items=0 ppid=39579 pid=39582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252598.500:9093): proctitle=706B696C6C002D55535231006874747064
type=USER_END msg=audit(1781252598.552:9094): pid=39561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252598.553:9095): pid=39561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252598.556:9096): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252598.556:9097): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252598.629:9098): pid=39502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39504 suid=74 rport=52866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252598.630:9099): pid=39502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=39504 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252598.631:9100): pid=39502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=39502 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252598.631:9101): pid=39502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252598.853:9102): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252598.853:9103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252598.891:9104): pid=39597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252598.891:9105): pid=39597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636875706D65736B7975646F7766757078697A686B776C6C6A70656A74636F78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252598.891:9106): pid=39597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252598.893:9107): pid=39597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=AVC msg=audit(1781252600.140:9108): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/2" dev="proc" ino=14380 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9108): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9108): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9109): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/3" dev="proc" ino=14382 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9109): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9109): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9110): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/4" dev="proc" ino=14384 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9110): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9110): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9111): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/5" dev="proc" ino=14386 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9111): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9111): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9112): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/6" dev="proc" ino=14388 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9112): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9112): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9113): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/8" dev="proc" ino=14392 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9113): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9113): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9114): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/10" dev="proc" ino=14396 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9114): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9114): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9115): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/12" dev="proc" ino=14400 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9115): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9115): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9116): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/13" dev="proc" ino=14402 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9116): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9116): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.140:9117): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/14" dev="proc" ino=14404 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.140:9117): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.140:9117): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9118): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/15" dev="proc" ino=14406 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9118): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9118): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9119): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/16" dev="proc" ino=14408 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9119): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9119): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9120): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/17" dev="proc" ino=14410 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9120): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9120): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9121): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/19" dev="proc" ino=14414 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9121): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9121): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9122): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/20" dev="proc" ino=14416 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9122): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9122): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9123): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/21" dev="proc" ino=14418 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9123): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9123): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9124): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22" dev="proc" ino=14420 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9124): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9124): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9125): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/23" dev="proc" ino=14422 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9125): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9125): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9126): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/24" dev="proc" ino=14424 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9126): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9126): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.141:9127): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/25" dev="proc" ino=14426 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.141:9127): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.141:9127): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9128): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26" dev="proc" ino=14428 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9128): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9128): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9129): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27" dev="proc" ino=14430 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9129): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9129): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9130): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/29" dev="proc" ino=14434 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9130): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9130): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9131): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/30" dev="proc" ino=14436 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9131): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9131): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9132): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/31" dev="proc" ino=14438 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9132): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9132): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9133): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/32" dev="proc" ino=14440 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9133): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9133): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9134): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34" dev="proc" ino=14444 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9134): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9134): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9135): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/35" dev="proc" ino=14446 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9135): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9135): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9136): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/36" dev="proc" ino=14448 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9136): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9136): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9137): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37" dev="proc" ino=14450 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9137): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9137): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9138): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/39" dev="proc" ino=14454 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9138): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9138): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9139): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/40" dev="proc" ino=14456 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9139): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9139): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9140): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/41" dev="proc" ino=14458 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9140): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9140): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9141): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/42" dev="proc" ino=14460 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9141): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9141): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9142): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/44" dev="proc" ino=14464 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9142): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9142): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9143): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/45" dev="proc" ino=14466 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9143): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9143): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9144): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/46" dev="proc" ino=14468 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9144): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9144): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9145): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/47" dev="proc" ino=14470 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9145): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9145): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9146): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/49" dev="proc" ino=14474 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9146): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9146): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9147): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/50" dev="proc" ino=14476 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9147): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9147): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9148): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/51" dev="proc" ino=14478 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9148): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9148): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9149): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/52" dev="proc" ino=14480 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9149): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9149): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9150): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/54" dev="proc" ino=14484 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9150): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9150): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9151): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/62" dev="proc" ino=14498 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9151): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9151): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9152): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/63" dev="proc" ino=14500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9152): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9152): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.142:9153): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/64" dev="proc" ino=14502 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.142:9153): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.142:9153): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9154): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/65" dev="proc" ino=14504 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9154): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9154): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9155): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/66" dev="proc" ino=14506 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9155): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9155): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9156): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/67" dev="proc" ino=14508 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9156): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9156): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9157): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/68" dev="proc" ino=14510 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9157): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9157): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9158): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/69" dev="proc" ino=14512 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9158): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9158): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9159): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/70" dev="proc" ino=14514 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9159): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9159): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9160): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/71" dev="proc" ino=14516 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9160): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9160): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9161): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/72" dev="proc" ino=14518 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9161): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9161): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9162): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/73" dev="proc" ino=14520 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9162): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9162): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9163): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/74" dev="proc" ino=14522 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9163): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9163): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9164): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/75" dev="proc" ino=14524 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9164): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9164): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9165): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/76" dev="proc" ino=14526 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9165): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9165): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9166): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/77" dev="proc" ino=14528 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9166): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9166): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9167): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/78" dev="proc" ino=14530 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9167): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9167): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9168): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/79" dev="proc" ino=14532 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9168): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9168): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9169): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/80" dev="proc" ino=14534 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9169): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9169): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9170): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/82" dev="proc" ino=14538 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9170): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9170): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9171): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/84" dev="proc" ino=14540 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9171): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9171): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9172): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/89" dev="proc" ino=14544 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9172): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9172): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9173): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/94" dev="proc" ino=14548 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9173): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9173): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9174): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/95" dev="proc" ino=14550 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9174): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9174): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9175): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/96" dev="proc" ino=14552 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9175): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9175): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9176): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/97" dev="proc" ino=14554 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9176): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9176): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9177): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/98" dev="proc" ino=14556 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9177): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9177): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9178): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/99" dev="proc" ino=14558 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9178): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9178): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9179): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/100" dev="proc" ino=14560 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9179): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9179): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9180): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/101" dev="proc" ino=14562 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9180): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9180): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9181): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/102" dev="proc" ino=14564 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9181): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9181): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9182): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/103" dev="proc" ino=14566 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9182): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9182): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9183): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/117" dev="proc" ino=14572 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9183): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9183): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9184): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/124" dev="proc" ino=14576 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9184): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9184): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9185): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/240" dev="proc" ino=14578 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9185): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9185): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9186): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/241" dev="proc" ino=14580 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9186): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9186): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.143:9187): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/287" dev="proc" ino=16272 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.143:9187): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.143:9187): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9188): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/394" dev="proc" ino=16274 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9188): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9188): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9189): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/395" dev="proc" ino=16275 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9189): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9189): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9190): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/436" dev="proc" ino=10909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9190): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9190): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9191): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/484" dev="proc" ino=10911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9191): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9191): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9192): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/492" dev="proc" ino=10913 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9192): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9192): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9193): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/493" dev="proc" ino=10914 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9193): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9193): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9194): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/494" dev="proc" ino=10915 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9194): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9194): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9195): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/495" dev="proc" ino=10916 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9195): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9195): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9196): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/496" dev="proc" ino=10917 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9196): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9196): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9197): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/515" dev="proc" ino=10920 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9197): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9197): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9198): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/516" dev="proc" ino=10921 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9198): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9198): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9199): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/517" dev="proc" ino=10922 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9199): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9199): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9200): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/518" dev="proc" ino=10923 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9200): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9200): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9201): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/519" dev="proc" ino=10924 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9201): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9201): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9202): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/520" dev="proc" ino=10925 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9202): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9202): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9203): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/521" dev="proc" ino=10926 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9203): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9203): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9204): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/522" dev="proc" ino=10927 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9204): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9204): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9205): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/523" dev="proc" ino=10928 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9205): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9205): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9206): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/524" dev="proc" ino=10929 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9206): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9206): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9207): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/618" dev="proc" ino=17770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9207): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9207): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9208): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/635" dev="proc" ino=15102 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9208): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9208): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9209): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/698" dev="proc" ino=147734 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9209): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9209): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9210): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/699" dev="proc" ino=147735 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9210): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9210): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9211): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/700" dev="proc" ino=147736 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9211): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9211): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9212): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/701" dev="proc" ino=147737 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9212): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9212): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9213): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/702" dev="proc" ino=147738 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9213): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9213): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9214): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/704" dev="proc" ino=147739 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9214): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9214): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9215): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/706" dev="proc" ino=147740 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9215): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9215): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9216): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/707" dev="proc" ino=147741 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9216): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9216): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9217): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/724" dev="proc" ino=15253 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rpcbind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9217): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9217): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9218): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/726" dev="proc" ino=11161 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9218): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9218): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9219): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/728" dev="proc" ino=147742 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9219): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9219): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9220): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/751" dev="proc" ino=15285 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9220): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9220): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9221): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/755" dev="proc" ino=14046 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9221): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9221): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9222): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/758" dev="proc" ino=15301 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:irqbalance_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9222): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9222): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9223): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/759" dev="proc" ino=15304 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9223): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9223): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9224): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/797" dev="proc" ino=25624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9224): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9224): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9225): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/802" dev="proc" ino=18960 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9225): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9225): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9226): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/1036" dev="proc" ino=14193 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9226): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9226): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9227): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/1138" dev="proc" ino=942 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9227): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9227): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9228): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/1140" dev="proc" ino=945 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9228): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9228): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9229): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/1142" dev="proc" ino=948 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:getty_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9229): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9229): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.144:9230): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/4183" dev="proc" ino=29021 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.144:9230): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.144:9230): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9231): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/4339" dev="proc" ino=147743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9231): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9231): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9232): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/5806" dev="proc" ino=147744 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9232): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9232): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9233): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/5982" dev="proc" ino=36898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9233): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9233): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9234): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/6595" dev="proc" ino=37243 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:rhsmcertd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9234): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9234): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9235): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/6663" dev="proc" ino=147745 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9235): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9235): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9236): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/6784" dev="proc" ino=147746 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9236): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9236): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9237): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/18424" dev="proc" ino=50756 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9237): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9237): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9238): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/18436" dev="proc" ino=50742 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9238): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9238): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9239): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/18437" dev="proc" ino=147747 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9239): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9239): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9240): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22099" dev="proc" ino=147750 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9240): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9240): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9241): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22172" dev="proc" ino=68822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9241): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9241): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9242): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22178" dev="proc" ino=147751 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9242): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9242): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9243): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22179" dev="proc" ino=147752 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9243): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9243): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9244): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22180" dev="proc" ino=147753 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9244): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9244): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9245): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22181" dev="proc" ino=147754 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9245): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9245): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9246): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/22253" dev="proc" ino=69644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:openvswitch_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9246): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9246): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9247): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/23712" dev="proc" ino=147755 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9247): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9247): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9248): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26000" dev="proc" ino=147756 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9248): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9248): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9249): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26071" dev="proc" ino=147759 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9249): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9249): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9250): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26084" dev="proc" ino=147760 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9250): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9250): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9251): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26087" dev="proc" ino=147761 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9251): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9251): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9252): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26097" dev="proc" ino=93910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9252): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9252): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9253): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26102" dev="proc" ino=93988 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9253): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9253): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9254): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26409" dev="proc" ino=103441 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9254): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9254): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9255): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26413" dev="proc" ino=103511 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9255): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9255): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9256): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26416" dev="proc" ino=147763 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9256): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9256): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9257): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/26429" dev="proc" ino=101743 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9257): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9257): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9258): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27076" dev="proc" ino=147765 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9258): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9258): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9259): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27159" dev="proc" ino=147766 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9259): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9259): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9260): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27162" dev="proc" ino=147767 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9260): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9260): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9261): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27233" dev="proc" ino=147768 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9261): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9261): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9262): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27236" dev="proc" ino=147769 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9262): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9262): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9263): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27326" dev="proc" ino=147770 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9263): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9263): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9264): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27327" dev="proc" ino=147771 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9264): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9264): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9265): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27348" dev="proc" ino=147772 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9265): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9265): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9266): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27349" dev="proc" ino=147773 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9266): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9266): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9267): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27350" dev="proc" ino=147774 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9267): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9267): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9268): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/27989" dev="proc" ino=147775 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9268): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9268): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9269): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/28701" dev="proc" ino=147776 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9269): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9269): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9270): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/29505" dev="proc" ino=147777 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9270): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9270): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9271): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/29531" dev="proc" ino=118112 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:tuned_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9271): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9271): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9272): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33687" dev="proc" ino=147778 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9272): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9272): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9273): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33688" dev="proc" ino=147779 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9273): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9273): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9274): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33689" dev="proc" ino=147780 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9274): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9274): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9275): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33690" dev="proc" ino=147781 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9275): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9275): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9276): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33691" dev="proc" ino=147782 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9276): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9276): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9277): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33692" dev="proc" ino=147783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9277): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9277): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9278): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33693" dev="proc" ino=147784 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9278): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9278): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9279): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33694" dev="proc" ino=147785 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9279): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9279): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9280): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33695" dev="proc" ino=147786 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9280): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9280): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9281): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33696" dev="proc" ino=147787 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9281): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9281): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9282): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33697" dev="proc" ino=147788 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9282): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9282): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9283): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33750" dev="proc" ino=147789 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9283): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9283): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9284): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33751" dev="proc" ino=147790 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9284): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9284): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9285): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33752" dev="proc" ino=147791 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9285): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9285): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.145:9286): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33753" dev="proc" ino=147792 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.145:9286): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.145:9286): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9287): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33754" dev="proc" ino=147793 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9287): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9287): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9288): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33755" dev="proc" ino=147794 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9288): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9288): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9289): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33756" dev="proc" ino=147795 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9289): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9289): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9290): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33757" dev="proc" ino=147796 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9290): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9290): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9291): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33758" dev="proc" ino=147797 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9291): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9291): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9292): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33759" dev="proc" ino=147798 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9292): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9292): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9293): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33760" dev="proc" ino=147799 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9293): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9293): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9294): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33761" dev="proc" ino=147800 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9294): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9294): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9295): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33762" dev="proc" ino=147801 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9295): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9295): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9296): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33763" dev="proc" ino=147802 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9296): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9296): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9297): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33764" dev="proc" ino=147803 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9297): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9297): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9298): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33765" dev="proc" ino=147804 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9298): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9298): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9299): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33766" dev="proc" ino=147805 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9299): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9299): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9300): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33767" dev="proc" ino=147806 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9300): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9300): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9301): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33768" dev="proc" ino=147807 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9301): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9301): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9302): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33769" dev="proc" ino=147808 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9302): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9302): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9303): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33770" dev="proc" ino=147809 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9303): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9303): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9304): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33771" dev="proc" ino=147810 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9304): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9304): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9305): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33772" dev="proc" ino=147811 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9305): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9305): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9306): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33773" dev="proc" ino=147812 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9306): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9306): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9307): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33774" dev="proc" ino=147813 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9307): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9307): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9308): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33775" dev="proc" ino=147814 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9308): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9308): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9309): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33776" dev="proc" ino=147815 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9309): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9309): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9310): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33777" dev="proc" ino=147816 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9310): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9310): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9311): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33778" dev="proc" ino=147817 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9311): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9311): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9312): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33779" dev="proc" ino=147818 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9312): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9312): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9313): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33780" dev="proc" ino=147819 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9313): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9313): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9314): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33781" dev="proc" ino=147820 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9314): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9314): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9315): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33782" dev="proc" ino=147821 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9315): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9315): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9316): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33783" dev="proc" ino=147822 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9316): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9316): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9317): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33784" dev="proc" ino=147823 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9317): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9317): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9318): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33785" dev="proc" ino=147824 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9318): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9318): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9319): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33786" dev="proc" ino=147825 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9319): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9319): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9320): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33787" dev="proc" ino=147826 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9320): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9320): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9321): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33788" dev="proc" ino=147827 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9321): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9321): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9322): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33789" dev="proc" ino=147828 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9322): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9322): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9323): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33790" dev="proc" ino=147829 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9323): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9323): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9324): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33791" dev="proc" ino=147830 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9324): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9324): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9325): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33792" dev="proc" ino=147831 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9325): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9325): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9326): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33793" dev="proc" ino=147832 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9326): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9326): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9327): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33794" dev="proc" ino=147833 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9327): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9327): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9328): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33795" dev="proc" ino=147834 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9328): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9328): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9329): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33796" dev="proc" ino=147835 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9329): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9329): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9330): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33797" dev="proc" ino=147836 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9330): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9330): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9331): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33798" dev="proc" ino=147837 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9331): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9331): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9332): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33799" dev="proc" ino=147838 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9332): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9332): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9333): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33800" dev="proc" ino=147839 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9333): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9333): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9334): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/33801" dev="proc" ino=147840 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9334): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9334): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9335): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34656" dev="proc" ino=147841 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9335): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9335): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9336): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34657" dev="proc" ino=147842 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9336): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9336): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9337): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34658" dev="proc" ino=147843 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9337): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9337): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9338): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34659" dev="proc" ino=147844 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9338): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9338): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9339): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34660" dev="proc" ino=147845 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9339): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9339): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9340): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34661" dev="proc" ino=147846 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9340): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9340): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9341): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34662" dev="proc" ino=147847 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9341): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9341): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9342): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34663" dev="proc" ino=147848 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9342): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9342): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9343): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34664" dev="proc" ino=147849 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9343): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9343): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9344): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34665" dev="proc" ino=147850 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9344): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9344): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.146:9345): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34666" dev="proc" ino=147851 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.146:9345): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.146:9345): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9346): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34667" dev="proc" ino=147852 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9346): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9346): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9347): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34668" dev="proc" ino=147853 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9347): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9347): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9348): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34669" dev="proc" ino=147854 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9348): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9348): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9349): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34670" dev="proc" ino=147855 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9349): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9349): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9350): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34671" dev="proc" ino=147856 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9350): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9350): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9351): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34672" dev="proc" ino=147857 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9351): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9351): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9352): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34673" dev="proc" ino=147858 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9352): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9352): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9353): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34674" dev="proc" ino=147859 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9353): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9353): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9354): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34675" dev="proc" ino=147860 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9354): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9354): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9355): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34676" dev="proc" ino=147861 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9355): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9355): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9356): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34677" dev="proc" ino=147862 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9356): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9356): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9357): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34678" dev="proc" ino=147863 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9357): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9357): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9358): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34679" dev="proc" ino=147864 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9358): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9358): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9359): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34680" dev="proc" ino=147865 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9359): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9359): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9360): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34681" dev="proc" ino=147866 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9360): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9360): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9361): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34682" dev="proc" ino=147867 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9361): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9361): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9362): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34683" dev="proc" ino=147868 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9362): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9362): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9363): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34684" dev="proc" ino=147869 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9363): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9363): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9364): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34685" dev="proc" ino=147870 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9364): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9364): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9365): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34686" dev="proc" ino=147871 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9365): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9365): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9366): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34687" dev="proc" ino=147872 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9366): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9366): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9367): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34688" dev="proc" ino=147873 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9367): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9367): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9368): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34689" dev="proc" ino=147874 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9368): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9368): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9369): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34690" dev="proc" ino=147875 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9369): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9369): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9370): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34691" dev="proc" ino=147876 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9370): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9370): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9371): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34692" dev="proc" ino=147877 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9371): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9371): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9372): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34693" dev="proc" ino=147878 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9372): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9372): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9373): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34694" dev="proc" ino=147879 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9373): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9373): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9374): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34695" dev="proc" ino=147880 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9374): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9374): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9375): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34696" dev="proc" ino=147881 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9375): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9375): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9376): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34697" dev="proc" ino=147882 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9376): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9376): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9377): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34698" dev="proc" ino=147883 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9377): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9377): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9378): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34699" dev="proc" ino=147884 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9378): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9378): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9379): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34700" dev="proc" ino=147885 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9379): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9379): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9380): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34701" dev="proc" ino=147886 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9380): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9380): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9381): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34702" dev="proc" ino=147887 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9381): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9381): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9382): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34703" dev="proc" ino=147888 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9382): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9382): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9383): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34704" dev="proc" ino=147889 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9383): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9383): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9384): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34705" dev="proc" ino=147890 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9384): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9384): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9385): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34706" dev="proc" ino=147891 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9385): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9385): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9386): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34707" dev="proc" ino=147892 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9386): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9386): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9387): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34708" dev="proc" ino=147893 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9387): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9387): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9388): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34709" dev="proc" ino=147894 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9388): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9388): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9389): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34710" dev="proc" ino=147895 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9389): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9389): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9390): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34711" dev="proc" ino=147896 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9390): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9390): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9391): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34712" dev="proc" ino=147897 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9391): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9391): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9392): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34713" dev="proc" ino=147898 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9392): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9392): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9393): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34714" dev="proc" ino=147899 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9393): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9393): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9394): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34715" dev="proc" ino=147900 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9394): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9394): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9395): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34716" dev="proc" ino=147901 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9395): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9395): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9396): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34717" dev="proc" ino=147902 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9396): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9396): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.147:9397): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34718" dev="proc" ino=147903 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.147:9397): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.147:9397): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9398): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34719" dev="proc" ino=147904 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9398): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9398): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9399): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34720" dev="proc" ino=147905 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9399): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9399): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9400): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34721" dev="proc" ino=147906 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9400): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9400): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9401): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34722" dev="proc" ino=147907 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9401): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9401): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9402): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34723" dev="proc" ino=147908 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9402): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9402): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9403): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/34766" dev="proc" ino=147909 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9403): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9403): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9404): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/35869" dev="proc" ino=147910 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9404): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9404): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9405): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/35934" dev="proc" ino=147911 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9405): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9405): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9406): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/36254" dev="proc" ino=147666 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9406): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9406): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9407): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37193" dev="proc" ino=156607 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9407): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9407): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9408): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37739" dev="proc" ino=158783 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9408): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9408): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9409): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37740" dev="proc" ino=157091 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_net_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9409): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9409): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9410): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37962" dev="proc" ino=156608 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9410): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9410): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9411): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37963" dev="proc" ino=156609 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9411): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9411): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9412): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37964" dev="proc" ino=156610 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9412): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9412): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9413): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37965" dev="proc" ino=156611 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9413): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9413): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9414): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37966" dev="proc" ino=156612 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9414): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9414): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9415): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37967" dev="proc" ino=156613 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9415): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9415): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9416): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37968" dev="proc" ino=156614 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9416): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9416): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9417): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37969" dev="proc" ino=156615 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9417): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9417): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9418): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37970" dev="proc" ino=156616 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9418): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9418): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9419): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37971" dev="proc" ino=156617 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9419): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9419): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9420): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37972" dev="proc" ino=156618 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9420): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9420): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9421): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37973" dev="proc" ino=156619 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9421): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9421): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9422): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37974" dev="proc" ino=156620 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9422): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9422): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9423): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37975" dev="proc" ino=156621 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9423): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9423): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9424): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37976" dev="proc" ino=156622 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9424): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9424): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9425): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37977" dev="proc" ino=156623 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9425): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9425): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9426): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37978" dev="proc" ino=156624 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9426): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9426): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9427): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37979" dev="proc" ino=156625 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9427): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9427): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9428): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37980" dev="proc" ino=156626 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9428): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9428): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9429): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37981" dev="proc" ino=156627 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9429): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9429): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9430): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37982" dev="proc" ino=156628 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9430): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9430): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9431): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37983" dev="proc" ino=156629 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9431): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9431): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9432): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37984" dev="proc" ino=156630 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9432): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9432): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9433): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37985" dev="proc" ino=156631 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9433): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9433): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9434): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37986" dev="proc" ino=156632 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9434): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9434): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9435): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37987" dev="proc" ino=156633 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9435): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9435): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9436): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37988" dev="proc" ino=156634 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9436): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9436): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9437): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37989" dev="proc" ino=156635 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9437): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9437): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9438): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37990" dev="proc" ino=156636 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9438): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9438): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9439): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37991" dev="proc" ino=156637 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9439): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9439): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9440): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37992" dev="proc" ino=156638 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9440): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9440): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9441): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37993" dev="proc" ino=156639 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9441): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9441): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9442): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37994" dev="proc" ino=156640 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9442): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9442): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9443): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37995" dev="proc" ino=156641 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9443): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9443): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9444): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37996" dev="proc" ino=156642 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9444): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9444): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9445): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37997" dev="proc" ino=156643 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9445): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9445): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9446): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37998" dev="proc" ino=156644 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9446): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9446): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9447): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/37999" dev="proc" ino=156645 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9447): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9447): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9448): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38000" dev="proc" ino=156646 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9448): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9448): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9449): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38001" dev="proc" ino=156647 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9449): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9449): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9450): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38002" dev="proc" ino=156648 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9450): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9450): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9451): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38003" dev="proc" ino=156649 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9451): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9451): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9452): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38004" dev="proc" ino=156650 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9452): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9452): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9453): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38005" dev="proc" ino=156651 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9453): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9453): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.148:9454): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38006" dev="proc" ino=156652 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.148:9454): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.148:9454): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9455): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38007" dev="proc" ino=156653 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9455): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9455): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9456): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38008" dev="proc" ino=156654 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9456): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9456): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9457): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38009" dev="proc" ino=156655 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9457): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9457): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9458): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38010" dev="proc" ino=156656 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9458): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9458): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9459): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38030" dev="proc" ino=156657 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9459): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9459): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9460): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38338" dev="proc" ino=158500 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9460): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9460): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9461): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38555" dev="proc" ino=160326 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9461): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9461): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9462): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38556" dev="proc" ino=160336 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9462): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9462): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9463): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38557" dev="proc" ino=164129 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9463): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9463): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9464): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38558" dev="proc" ino=164137 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9464): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9464): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9465): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38559" dev="proc" ino=164155 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9465): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9465): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9466): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38560" dev="proc" ino=164147 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9466): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9466): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9467): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38561" dev="proc" ino=164163 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9467): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9467): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9468): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/38621" dev="proc" ino=160387 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9468): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9468): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9469): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/39461" dev="proc" ino=161299 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9469): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9469): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9470): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/39486" dev="proc" ino=161340 scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9470): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9470): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9471): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/39584" dev="proc" ino=163627 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9471): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9471): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9472): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/39597" dev="proc" ino=161482 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9472): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9472): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9473): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/39599" dev="proc" ino=168529 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9473): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9473): proctitle=706B696C6C002D55535231006874747064
type=AVC msg=audit(1781252600.149:9474): avc:  denied  { getattr } for  pid=39618 comm="pkill" path="/proc/39601" dev="proc" ino=163642 scontext=system_u:system_r:certmonger_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=dir permissive=0
type=SYSCALL msg=audit(1781252600.149:9474): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=5608094ba030 a2=7fe91aee8aa0 a3=0 items=0 ppid=39615 pid=39618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pkill" exe="/usr/bin/pkill" subj=system_u:system_r:certmonger_t:s0 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781252600.149:9474): proctitle=706B696C6C002D55535231006874747064
type=USER_END msg=audit(1781252600.311:9475): pid=39597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252600.311:9476): pid=39597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252600.317:9477): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252600.317:9478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252600.538:9479): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252600.539:9480): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252600.605:9481): pid=39633 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252600.605:9482): pid=39633 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A7A727566666B616E70797169696D7A61727066617268797073666D637164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252600.606:9483): pid=39633 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252600.608:9484): pid=39633 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252614.215:9485): pid=39990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=39990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252614.247:9486): pid=39989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=39990 suid=74 rport=48456 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252614.247:9487): pid=39989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=39990 suid=74 rport=48456 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252614.490:9488): pid=39989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252615.111:9489): pid=39633 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252615.111:9490): pid=39633 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252615.114:9491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252615.114:9492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252615.279:9493): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252615.279:9494): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252615.338:9495): pid=40006 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252615.339:9496): pid=40006 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A677979706A7A6C6178636C736A7A676C6A6B706D686165616968716A7A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252615.340:9497): pid=40006 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252615.344:9498): pid=40006 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252615.559:9499): pid=40006 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252615.560:9500): pid=40006 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252615.563:9501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252615.563:9502): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252615.832:9503): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252615.832:9504): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252615.881:9505): pid=40034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252615.881:9506): pid=40034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7166696574756B6B70657166647275786269667066626578776262746C6E7277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252615.882:9507): pid=40034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252615.885:9508): pid=40034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252616.335:9509): pid=39989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39990 suid=74 rport=48456 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252616.335:9510): pid=39989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=39990 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252616.336:9511): pid=39989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=39989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252616.336:9512): pid=39989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252618.072:9513): pid=40077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=40077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252618.074:9514): pid=40050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40077 suid=74 rport=52300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252618.074:9515): pid=40050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40077 suid=74 rport=52300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252620.790:9516): pid=40034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252620.790:9517): pid=40034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252620.796:9518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252620.796:9519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252620.994:9520): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252620.994:9521): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252621.043:9522): pid=40104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252621.044:9523): pid=40104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69677073616E6A68657A6A70657A6B6B62726D7A6E66686864706E65737A6477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252621.044:9524): pid=40104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252621.047:9525): pid=40104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252621.279:9526): pid=40104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252621.279:9527): pid=40104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252621.283:9528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252621.284:9529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252621.843:9530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252621.843:9531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252621.907:9532): pid=40131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252621.907:9533): pid=40131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7264737A766A6F69686E6B6576726C676D7678646967786A67647671686D686E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252621.908:9534): pid=40131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252621.910:9535): pid=40131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252622.103:9536): pid=40131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252622.103:9537): pid=40131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252622.107:9538): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252622.107:9539): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252622.196:9540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252622.196:9541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252622.268:9542): pid=40148 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252622.269:9543): pid=40148 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B757478766D62727A6E6C7569746665707972617664696C7770747869756964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252622.270:9544): pid=40148 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252622.273:9545): pid=40148 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252622.452:9546): pid=40148 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252622.453:9547): pid=40148 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252622.457:9548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252622.457:9549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252622.583:9550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252622.583:9551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252622.646:9552): pid=40164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252622.646:9553): pid=40164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D787167736368726E70616C72667A747A63797A78646C697070737A736E77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252622.647:9554): pid=40164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252622.649:9555): pid=40164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781252623.161:9556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.1-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252623.170:9557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781252623.176:9558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781252623.184:9559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781252623.217:9560): pid=40164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252623.217:9561): pid=40164 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252623.222:9562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252623.222:9563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252623.433:9564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252623.433:9565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252623.491:9566): pid=40186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252623.492:9567): pid=40186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6779616A7977756965726673686A73766B7361756A6E6C6F717A7A68746E6479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252623.492:9568): pid=40186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252623.497:9569): pid=40186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252629.107:9570): pid=40186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252629.107:9571): pid=40186 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252629.112:9572): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252629.112:9573): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252629.249:9574): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252629.249:9575): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252629.312:9576): pid=40253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252629.312:9577): pid=40253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A71636E6D677571686471637174786762767664766A6B737A7777627A646C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252629.312:9578): pid=40253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252629.315:9579): pid=40253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252629.587:9580): pid=40253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252629.587:9581): pid=40253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252629.592:9582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252629.592:9583): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252629.709:9584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252629.709:9585): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252629.757:9586): pid=40282 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252629.757:9587): pid=40282 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C667964786B68796379686478756E6E6B796D7A6B697065646D627863716C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252629.757:9588): pid=40282 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252629.758:9589): pid=40282 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252632.980:9590): pid=40282 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252632.981:9591): pid=40282 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252632.985:9592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252632.985:9593): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252633.128:9594): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252633.128:9595): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252633.194:9596): pid=40299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252633.195:9597): pid=40299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F686A66717464707A7378737A6B6A7771707176676E65746C716E6377766D6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252633.195:9598): pid=40299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252633.199:9599): pid=40299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252633.542:9600): pid=40299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252633.542:9601): pid=40299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252633.547:9602): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252633.547:9603): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252633.657:9604): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252633.657:9605): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252633.714:9606): pid=40318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252633.715:9607): pid=40318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61646D73627A6661736A77697A696C676C72686B66617262717978736A75716A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252633.715:9608): pid=40318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252633.717:9609): pid=40318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252633.894:9610): pid=40318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252633.895:9611): pid=40318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252633.900:9612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252633.900:9613): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252633.954:9614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252633.954:9615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252633.994:9616): pid=40334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252633.995:9617): pid=40334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7876757A6761616B6B6770746B7A71646A62716D6A776B6E687A7A726969776A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252633.995:9618): pid=40334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252633.998:9619): pid=40334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252634.140:9620): pid=40334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252634.140:9621): pid=40334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252634.144:9622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252634.144:9623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252634.307:9624): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252634.307:9625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252634.359:9626): pid=40350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252634.359:9627): pid=40350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647264626C636A696F716579656D6B6C6B6E6571666E6A706A73737A6B6D7276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252634.360:9628): pid=40350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252634.362:9629): pid=40350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252635.427:9630): pid=40350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252635.427:9631): pid=40350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252635.432:9632): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252635.432:9633): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252635.766:9634): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252635.766:9635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252635.833:9636): pid=40376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252635.834:9637): pid=40376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716365657263757878726E737A617368717064746D706D7A65756D726C73766C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252635.834:9638): pid=40376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252635.837:9639): pid=40376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252636.139:9640): pid=40376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252636.139:9641): pid=40376 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252636.143:9642): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252636.143:9643): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252636.487:9644): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252636.488:9645): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252636.538:9646): pid=40396 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252636.539:9647): pid=40396 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71656B616F666E76647075616F65687A78756D6E697663716761666B74716E79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252636.539:9648): pid=40396 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252636.541:9649): pid=40396 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252639.801:9650): pid=40396 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252639.802:9651): pid=40396 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252639.806:9652): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252639.806:9653): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252639.967:9654): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252639.967:9655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252640.030:9656): pid=40414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252640.031:9657): pid=40414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7873616C6C7974776E777A78666376646166736A78757361696663717A636F71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252640.031:9658): pid=40414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252640.034:9659): pid=40414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252643.367:9660): pid=40414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252643.367:9661): pid=40414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252643.370:9662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252643.370:9663): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252643.592:9664): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252643.592:9665): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252643.636:9666): pid=40431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252643.636:9667): pid=40431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6572776A686F7A7A6E667967677663747174666C757861646575616161717A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252643.636:9668): pid=40431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252643.638:9669): pid=40431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252643.816:9670): pid=40431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252643.817:9671): pid=40431 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252643.820:9672): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252643.820:9673): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252644.002:9674): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252644.002:9675): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252644.059:9676): pid=40447 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252644.059:9677): pid=40447 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F74657564726473677162676872636C7475666D656479636961736A676273203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252644.060:9678): pid=40447 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252644.061:9679): pid=40447 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252645.731:9680): pid=40447 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252645.731:9681): pid=40447 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252645.736:9682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252645.737:9683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252645.926:9684): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252645.926:9685): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252645.989:9686): pid=40640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252645.990:9687): pid=40640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C6D626E76626863636D71697079666A74747671626E61616F71646A647268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252645.990:9688): pid=40640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252645.993:9689): pid=40640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252647.345:9690): pid=40640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252647.345:9691): pid=40640 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252647.350:9692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252647.350:9693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252647.783:9694): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252647.783:9695): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252647.844:9696): pid=40658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252647.844:9697): pid=40658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71696C67737A6A6375616D63617A61647A79747A7975676261616C6864767A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252647.845:9698): pid=40658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252647.847:9699): pid=40658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252649.586:9700): pid=40658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252649.586:9701): pid=40658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252649.590:9702): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252649.590:9703): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252649.735:9704): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252649.735:9705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252649.796:9706): pid=40755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252649.797:9707): pid=40755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62786B716C77646961647665696D756F787976766E657169667964686C766575203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252649.798:9708): pid=40755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252649.801:9709): pid=40755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252649.994:9710): pid=40755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252649.994:9711): pid=40755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252649.998:9712): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252649.998:9713): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252650.071:9714): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252650.071:9715): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252650.128:9716): pid=40771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252650.129:9717): pid=40771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A626864656E6F7865617A74776B6C6F7876657A6E7A7369636A6B6E6B756375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252650.129:9718): pid=40771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252650.132:9719): pid=40771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252650.300:9720): pid=40771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252650.301:9721): pid=40771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252650.305:9722): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252650.305:9723): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252650.650:9724): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252650.650:9725): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252650.707:9726): pid=40787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252650.707:9727): pid=40787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6464626B7268756874627479727979756B716D6A7664696B786B7965727A7872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252650.707:9728): pid=40787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252650.710:9729): pid=40787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252651.010:9730): pid=40787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252651.011:9731): pid=40787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252651.015:9732): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252651.015:9733): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252651.292:9734): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252651.292:9735): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252651.355:9736): pid=40807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252651.356:9737): pid=40807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F797A756E71736661786D65786278666D6E707569726E64676F6765796C63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252651.356:9738): pid=40807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252651.359:9739): pid=40807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252654.453:9740): pid=40812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=40812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781252654.523:9741): pid=40807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252654.523:9742): pid=40807 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252654.528:9743): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252654.528:9744): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252654.548:9745): pid=40811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40812 suid=74 rport=46750 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252654.549:9746): pid=40811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40812 suid=74 rport=46750 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781252654.729:9747): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252654.729:9748): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252654.780:9749): pid=40826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252654.780:9750): pid=40826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7563746F777A6A676172776B706561616363786A716871657477656C6A7A6F62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252654.781:9751): pid=40826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252654.783:9752): pid=40826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252655.042:9753): pid=40811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pepe" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252656.564:9754): pid=40811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40812 suid=74 rport=46750 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252656.565:9755): pid=40811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=40812 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252656.566:9756): pid=40811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=40811 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252656.566:9757): pid=40811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252657.398:9758): pid=40831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=40831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252657.660:9759): pid=40830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40831 suid=74 rport=56936 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252657.660:9760): pid=40830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40831 suid=74 rport=56936 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252658.110:9761): pid=40826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252658.110:9762): pid=40826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252658.115:9763): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252658.115:9764): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252658.312:9765): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252658.312:9766): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252658.367:9767): pid=40845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252658.367:9768): pid=40845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73716B636E636A757964657A687577756273636174677374676F776675747A67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252658.368:9769): pid=40845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252658.370:9770): pid=40845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252658.578:9771): pid=40845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252658.578:9772): pid=40845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252658.582:9773): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252658.583:9774): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252658.756:9775): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252658.756:9776): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252658.810:9777): pid=40861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252658.811:9778): pid=40861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D6269736978686A7564646D7474626B637671766C61636C6A73646C687278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252658.811:9779): pid=40861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252658.814:9780): pid=40861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252658.839:9781): pid=40830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252659.000:9782): pid=40861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252659.001:9783): pid=40861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252659.005:9784): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252659.005:9785): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252659.163:9786): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252659.163:9787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252659.218:9788): pid=40878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252659.218:9789): pid=40878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7275617761657477717274747373627372616F6672646F77676976616D747978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252659.219:9790): pid=40878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252659.223:9791): pid=40878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252659.548:9792): pid=40878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252659.548:9793): pid=40878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252659.552:9794): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252659.552:9795): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252659.908:9796): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252659.908:9797): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252659.966:9798): pid=40896 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252659.966:9799): pid=40896 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786A757A64796D6D787A7173736D7179746272786E79746978726D6D6C63736F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252659.967:9800): pid=40896 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252659.969:9801): pid=40896 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252661.798:9802): pid=40896 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252661.798:9803): pid=40896 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252661.803:9804): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252661.803:9805): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252662.177:9806): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252662.177:9807): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252662.236:9808): pid=41234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252662.236:9809): pid=41234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73796B75616C7071767A6F7A626A766D66626A796365616A6A786B6B76686175203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252662.238:9810): pid=41234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252662.240:9811): pid=41234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252662.733:9812): pid=40830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40831 suid=74 rport=56936 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252662.733:9813): pid=40830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=40831 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252662.735:9814): pid=40830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=40830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252662.735:9815): pid=40830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252663.861:9816): pid=41234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252663.862:9817): pid=41234 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252663.866:9818): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252663.866:9819): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252664.212:9820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252664.212:9821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252664.261:9822): pid=41334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252664.262:9823): pid=41334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E7468777A626C75706E676A77626D6F6C646F716C7972686477686A656879203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252664.262:9824): pid=41334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252664.265:9825): pid=41334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252665.743:9826): pid=41334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252665.743:9827): pid=41334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252665.747:9828): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252665.747:9829): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252666.019:9830): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252666.019:9831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252666.069:9832): pid=41430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252666.069:9833): pid=41430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B666465666B62626B7A7A6B6674776A71656B637A686961736A646C7A76646C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252666.070:9834): pid=41430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252666.071:9835): pid=41430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252667.765:9836): pid=41430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252667.766:9837): pid=41430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252667.769:9838): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252667.769:9839): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252667.981:9840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252667.981:9841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252668.043:9842): pid=41527 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252668.044:9843): pid=41527 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B746C6D666E6D6679706971657073636D69626A667179756D74656C6C6E6C66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252668.044:9844): pid=41527 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252668.047:9845): pid=41527 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252668.238:9846): pid=41527 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252668.238:9847): pid=41527 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252668.242:9848): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252668.242:9849): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252669.128:9850): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252669.128:9851): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252669.172:9852): pid=41544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252669.173:9853): pid=41544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F646C746768666877717879746A6165796D6B6E6762746D73627A6A6B6178203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252669.173:9854): pid=41544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252669.175:9855): pid=41544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252684.211:9856): pid=41544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252684.211:9857): pid=41544 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252684.216:9858): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252684.216:9859): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252684.374:9860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252684.374:9861): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252684.447:9862): pid=41622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252684.447:9863): pid=41622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C69656477797462757871747970626365697A676E61726C64766D6E777570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252684.448:9864): pid=41622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252684.451:9865): pid=41622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252684.702:9866): pid=41622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252684.703:9867): pid=41622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252684.706:9868): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252684.706:9869): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252685.099:9870): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252685.099:9871): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252685.150:9872): pid=41651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252685.150:9873): pid=41651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E72776E7470676A65697A65796E62657574726D6772676E657A79716C777A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252685.151:9874): pid=41651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252685.153:9875): pid=41651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252685.447:9876): pid=41651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252685.447:9877): pid=41651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252685.450:9878): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252685.450:9879): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252685.734:9880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252685.734:9881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252685.791:9882): pid=41671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252685.791:9883): pid=41671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787376796674647465706A696B796D6973746E7272756F73646A78646F6C7975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252685.792:9884): pid=41671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252685.794:9885): pid=41671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252688.951:9886): pid=41676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=41676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781252689.055:9887): pid=41671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252689.055:9888): pid=41671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252689.058:9889): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252689.058:9890): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252689.083:9891): pid=41675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=41676 suid=74 rport=34898 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252689.083:9892): pid=41675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=41676 suid=74 rport=34898 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781252689.185:9893): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252689.185:9894): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252689.228:9895): pid=41690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252689.228:9896): pid=41690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70657876756A65706162686E657A73736A677A6E796F737178666D7374787274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252689.229:9897): pid=41690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252689.230:9898): pid=41690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252689.895:9899): pid=41675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252691.757:9900): pid=41675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=41676 suid=74 rport=34898 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252691.757:9901): pid=41675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=41676 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252691.759:9902): pid=41675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=41675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252691.759:9903): pid=41675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252692.536:9904): pid=41690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252692.536:9905): pid=41690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252692.538:9906): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252692.538:9907): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252692.740:9908): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252692.740:9909): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252692.785:9910): pid=41710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252692.785:9911): pid=41710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D77677A706B717865617571626A71697161786477796F626E6F667176727964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252692.786:9912): pid=41710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252692.788:9913): pid=41710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252692.947:9914): pid=41710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252692.947:9915): pid=41710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252692.951:9916): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252692.951:9917): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252693.086:9918): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252693.086:9919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252693.142:9920): pid=41726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252693.142:9921): pid=41726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6E616D7A6B78716C7375786B6A69616E626B636B72796F7773737A6D7274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252693.143:9922): pid=41726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252693.146:9923): pid=41726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252693.352:9924): pid=41726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252693.352:9925): pid=41726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252693.355:9926): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252693.355:9927): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252693.543:9928): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252693.543:9929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252693.588:9930): pid=41742 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252693.589:9931): pid=41742 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6871636D717761686F6669686E6D6E67646877716D62777673766975646B736A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252693.589:9932): pid=41742 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252693.591:9933): pid=41742 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252693.895:9934): pid=41742 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252693.895:9935): pid=41742 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252693.900:9936): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252693.900:9937): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252694.244:9938): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252694.244:9939): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252694.301:9940): pid=41760 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252694.301:9941): pid=41760 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6770667963756173676978696A6A6F7165786D75677A74627171766170676A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252694.302:9942): pid=41760 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252694.305:9943): pid=41760 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252697.011:9944): pid=41760 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252697.011:9945): pid=41760 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252697.014:9946): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252697.014:9947): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252697.370:9948): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252697.370:9949): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252697.432:9950): pid=41858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252697.432:9951): pid=41858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666D726B736377627A72647478757071617479666B756A696467636E716E6E6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252697.433:9952): pid=41858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252697.435:9953): pid=41858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252697.770:9954): pid=41858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252697.770:9955): pid=41858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252697.774:9956): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252697.774:9957): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252698.072:9958): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252698.072:9959): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252698.123:9960): pid=41878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252698.123:9961): pid=41878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C63627464687067756F6C63636A6A74616D696773617265656461677274646A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252698.124:9962): pid=41878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252698.126:9963): pid=41878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252701.400:9964): pid=41878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252701.401:9965): pid=41878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252701.405:9966): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252701.405:9967): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252701.608:9968): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252701.608:9969): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252701.669:9970): pid=41895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252701.669:9971): pid=41895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6969786D676965787968676C666F6C7770787764626E676D72706E6A6A75646E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252701.671:9972): pid=41895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252701.675:9973): pid=41895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252704.970:9974): pid=41895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252704.971:9975): pid=41895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252704.975:9976): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252704.975:9977): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252705.166:9978): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252705.166:9979): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252705.216:9980): pid=42087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252705.217:9981): pid=42087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77767462647065746D65757A6B617A627A6C656F766B7A72716E6869616F6263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252705.217:9982): pid=42087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252705.219:9983): pid=42087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252705.419:9984): pid=42087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252705.419:9985): pid=42087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252705.422:9986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252705.422:9987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252705.577:9988): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252705.577:9989): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252705.641:9990): pid=42103 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252705.642:9991): pid=42103 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7876636F686C75726C706E72717461666D61676B6571637A696F697976676D79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252705.642:9992): pid=42103 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252705.644:9993): pid=42103 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252705.805:9994): pid=42103 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252705.805:9995): pid=42103 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252705.808:9996): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252705.808:9997): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252705.985:9998): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252705.985:9999): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252706.026:10000): pid=42119 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252706.027:10001): pid=42119 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67796F71767673706F706B6E77616B7964736861706E686D6C6261626A6C6A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252706.027:10002): pid=42119 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252706.029:10003): pid=42119 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252706.291:10004): pid=42119 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252706.291:10005): pid=42119 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252706.295:10006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252706.295:10007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252706.702:10008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252706.702:10009): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252706.762:10010): pid=42137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252706.763:10011): pid=42137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7163786378717062667A6D6967796769677A626361666267786B6B71666178203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252706.763:10012): pid=42137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252706.767:10013): pid=42137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252708.008:10014): pid=42137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252708.008:10015): pid=42137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252708.011:10016): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252708.011:10017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252708.401:10018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252708.401:10019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252708.460:10020): pid=42184 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252708.460:10021): pid=42184 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7673756273726865716B6D6F696D65706567626366796375707A6E6370797764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252708.460:10022): pid=42184 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252708.462:10023): pid=42184 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252708.772:10024): pid=42184 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252708.773:10025): pid=42184 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252708.777:10026): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252708.777:10027): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252709.119:10028): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252709.119:10029): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252709.174:10030): pid=42204 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252709.174:10031): pid=42204 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68716C72787368626274716C677169666578636A6273636D7775736E6A716C61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252709.174:10032): pid=42204 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252709.176:10033): pid=42204 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252712.364:10034): pid=42204 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252712.364:10035): pid=42204 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252712.368:10036): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252712.368:10037): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252712.558:10038): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252712.558:10039): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252712.624:10040): pid=42221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252712.625:10041): pid=42221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737673716473636C62736F766D7561796E6E6E6A6A6D78667270627864617463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252712.625:10042): pid=42221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252712.628:10043): pid=42221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252715.174:10044): pid=42226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=42226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252715.205:10045): pid=42225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=42226 suid=74 rport=41190 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252715.205:10046): pid=42225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=42226 suid=74 rport=41190 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252715.445:10047): pid=42225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="alicia" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252715.869:10048): pid=42221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252715.869:10049): pid=42221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252715.874:10050): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252715.874:10051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252716.093:10052): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252716.093:10053): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252716.132:10054): pid=42240 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252716.132:10055): pid=42240 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A636A706E6D6F677A757A767A757379786171736562757369766A64716B6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252716.133:10056): pid=42240 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252716.135:10057): pid=42240 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252716.331:10058): pid=42240 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252716.331:10059): pid=42240 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252716.334:10060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252716.334:10061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252716.452:10062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252716.452:10063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252716.499:10064): pid=42256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252716.499:10065): pid=42256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78787061696771756263617361656F68756D6972636562676E64766975657768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252716.500:10066): pid=42256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252716.502:10067): pid=42256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252716.708:10068): pid=42256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252716.708:10069): pid=42256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252716.713:10070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252716.713:10071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252716.886:10072): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252716.886:10073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252716.940:10074): pid=42272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252716.940:10075): pid=42272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62716571736873796A737A6666756E706C686A626F6661797178737A78647569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252716.941:10076): pid=42272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252716.943:10077): pid=42272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252717.240:10078): pid=42272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252717.240:10079): pid=42272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252717.245:10080): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252717.245:10081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252717.636:10082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252717.636:10083): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252717.704:10084): pid=42290 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252717.704:10085): pid=42290 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A61646F617665726D626C716A74616F7668666A72637262786E7962737661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252717.704:10086): pid=42290 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252717.706:10087): pid=42290 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252718.402:10088): pid=42225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=42226 suid=74 rport=41190 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252718.403:10089): pid=42225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=42226 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252718.404:10090): pid=42225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=42225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252718.404:10091): pid=42225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252719.379:10092): pid=42290 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252719.379:10093): pid=42290 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252719.384:10094): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252719.384:10095): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252719.642:10096): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252719.642:10097): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252719.703:10098): pid=42322 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252719.703:10099): pid=42322 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61626B7067727474777A6B636B6471787165667176656463756966626A6C7667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252719.704:10100): pid=42322 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252719.707:10101): pid=42322 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252726.430:10102): pid=42322 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252726.431:10103): pid=42322 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252726.437:10104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252726.437:10105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252726.626:10106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252726.626:10107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252726.681:10108): pid=42388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252726.681:10109): pid=42388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656569636E706376656D6C756469677374797769746A6C64637875737A676265203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252726.682:10110): pid=42388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252726.685:10111): pid=42388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252726.919:10112): pid=42388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252726.919:10113): pid=42388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252726.922:10114): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252726.922:10115): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252727.187:10116): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252727.187:10117): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252727.248:10118): pid=42416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252727.248:10119): pid=42416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E6B636D7661686B61786D6A6B6969797170766471656F6D686F6A70716A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252727.248:10120): pid=42416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252727.250:10121): pid=42416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252727.566:10122): pid=42416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252727.566:10123): pid=42416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252727.570:10124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252727.570:10125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252727.821:10126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252727.821:10127): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252727.865:10128): pid=42436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252727.865:10129): pid=42436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72757276646D716E74786F636A6B696C796F74796E7976786D72727876637369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252727.865:10130): pid=42436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252727.867:10131): pid=42436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252731.099:10132): pid=42436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252731.100:10133): pid=42436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252731.104:10134): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252731.104:10135): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252731.281:10136): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252731.281:10137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252731.342:10138): pid=42453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252731.343:10139): pid=42453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7077687870707A656B6F6F65727A656E7A616F7864786F72696F7374746F7962203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252731.344:10140): pid=42453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252731.347:10141): pid=42453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252734.610:10142): pid=42453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252734.611:10143): pid=42453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252734.615:10144): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252734.615:10145): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252734.814:10146): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252734.815:10147): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252734.858:10148): pid=42470 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252734.858:10149): pid=42470 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6671776B6F667068706A666F6C766E6878667278796D6777686E75616667736F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252734.859:10150): pid=42470 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252734.861:10151): pid=42470 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252735.029:10152): pid=42470 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252735.029:10153): pid=42470 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252735.033:10154): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252735.033:10155): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252735.206:10156): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252735.206:10157): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252735.263:10158): pid=42486 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252735.263:10159): pid=42486 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65626A7A6C6964676A73697861686E776D7065726A7469747A77756868787766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252735.264:10160): pid=42486 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252735.266:10161): pid=42486 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252735.432:10162): pid=42486 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252735.432:10163): pid=42486 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252735.435:10164): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252735.435:10165): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252735.577:10166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252735.577:10167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252735.623:10168): pid=42502 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252735.623:10169): pid=42502 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7162697963667674687068786C797879616871797667786D776565717A696F66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252735.624:10170): pid=42502 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252735.626:10171): pid=42502 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252735.955:10172): pid=42502 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252735.955:10173): pid=42502 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252735.959:10174): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252735.959:10175): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252736.341:10176): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252736.341:10177): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252736.388:10178): pid=42520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252736.388:10179): pid=42520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C637964616D776A67626D69636F757277747177696F736961706C7968637579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252736.389:10180): pid=42520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252736.391:10181): pid=42520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252737.206:10182): pid=42531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=42531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781252737.882:10183): pid=42520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252737.882:10184): pid=42520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252737.886:10185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252737.886:10186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252738.306:10187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252738.306:10188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252738.307:10189): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=42531 suid=74 rport=37270 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252738.307:10190): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=42531 suid=74 rport=37270 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1781252738.364:10191): pid=42554 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252738.364:10192): pid=42554 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7473746A7271636A6F7468646D6E7463667464637472656B6E79626D7668676F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252738.365:10193): pid=42554 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252738.367:10194): pid=42554 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252738.653:10195): pid=42554 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252738.654:10196): pid=42554 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252738.658:10197): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252738.658:10198): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252738.963:10199): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252738.963:10200): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252739.018:10201): pid=42574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252739.019:10202): pid=42574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6567646B6D6A667764697A776F64767A6379776778627966736B6C7675706478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252739.019:10203): pid=42574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252739.022:10204): pid=42574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252739.246:10205): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252741.128:10206): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=42531 suid=74 rport=37270 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252741.129:10207): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=42531 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252741.130:10208): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=42530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252741.130:10209): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252742.428:10210): pid=42574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252742.429:10211): pid=42574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252742.433:10212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252742.433:10213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252742.555:10214): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252742.555:10215): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252742.615:10216): pid=42593 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252742.615:10217): pid=42593 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E6A646F667966746D6D796E7276657371646772706C73786F617379697071203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252742.616:10218): pid=42593 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252742.620:10219): pid=42593 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252745.964:10220): pid=42593 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252745.964:10221): pid=42593 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252745.967:10222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252745.967:10223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252746.133:10224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252746.133:10225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252746.194:10226): pid=42653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252746.195:10227): pid=42653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E666C6D6E6D67716E666D79647474676E777269696B6E6B63706D75696568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252746.195:10228): pid=42653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252746.199:10229): pid=42653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252746.363:10230): pid=42653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252746.363:10231): pid=42653 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252746.366:10232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252746.367:10233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252746.525:10234): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252746.525:10235): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252746.586:10236): pid=42669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252746.586:10237): pid=42669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7672616C6E64756177787161626768737777746D646865676B6E78766F6870203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252746.586:10238): pid=42669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252746.588:10239): pid=42669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252746.767:10240): pid=42669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252746.767:10241): pid=42669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252746.772:10242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252746.772:10243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252746.999:10244): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252746.999:10245): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252747.058:10246): pid=42685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252747.058:10247): pid=42685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66636D6E69636963726177636B6E727A7073646D796A7A797A77796870616C70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252747.059:10248): pid=42685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252747.061:10249): pid=42685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252747.374:10250): pid=42685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252747.374:10251): pid=42685 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252747.379:10252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252747.379:10253): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252747.763:10254): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252747.763:10255): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252747.822:10256): pid=42703 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252747.822:10257): pid=42703 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E6D68766574697661666F796C6A776F696A746E6E6E6A686C7A6372616B68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252747.823:10258): pid=42703 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252747.825:10259): pid=42703 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252749.708:10260): pid=42703 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252749.708:10261): pid=42703 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252749.712:10262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252749.712:10263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252750.013:10264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252750.013:10265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252750.073:10266): pid=42808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252750.074:10267): pid=42808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C646C6F74687863666661796B746364726F67676968726477766B716C6A6278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252750.074:10268): pid=42808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252750.078:10269): pid=42808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252750.391:10270): pid=42808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252750.391:10271): pid=42808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252750.395:10272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252750.395:10273): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252750.748:10274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252750.748:10275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252750.808:10276): pid=42828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252750.809:10277): pid=42828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68676A74706E666E766F65766A6E787865687A7A73616A6F6A64747977646474203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252750.810:10278): pid=42828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252750.813:10279): pid=42828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252754.092:10280): pid=42828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252754.092:10281): pid=42828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252754.096:10282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252754.096:10283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252754.261:10284): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252754.261:10285): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252754.308:10286): pid=42845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252754.308:10287): pid=42845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6179756168737A7A677164717872717165696E77706B67777A626D7476737670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252754.309:10288): pid=42845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252754.311:10289): pid=42845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252757.552:10290): pid=42845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252757.552:10291): pid=42845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252757.557:10292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252757.557:10293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252757.740:10294): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252757.740:10295): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252757.791:10296): pid=42862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252757.791:10297): pid=42862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676976696B726462746164696471686D776F736D6E6665756875616D6D79736C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252757.791:10298): pid=42862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252757.793:10299): pid=42862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252758.001:10300): pid=42862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252758.001:10301): pid=42862 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252758.006:10302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252758.006:10303): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252758.188:10304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252758.188:10305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252758.243:10306): pid=42878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252758.243:10307): pid=42878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A736566756669616D66787569716178617069746B637274727077796E747468203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252758.244:10308): pid=42878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252758.246:10309): pid=42878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252758.417:10310): pid=42878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252758.417:10311): pid=42878 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252758.420:10312): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252758.420:10313): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252758.630:10314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252758.630:10315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252758.684:10316): pid=42894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252758.684:10317): pid=42894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636578656A68716E6B6C6E6D616B63716E6D66617161737677666C71627A7161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252758.685:10318): pid=42894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252758.687:10319): pid=42894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252760.007:10320): pid=42894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252760.007:10321): pid=42894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252760.011:10322): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252760.011:10323): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252760.398:10324): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252760.399:10325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252760.455:10326): pid=42912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252760.455:10327): pid=42912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696363617A676C79716870776C6C777A65736C64646C636F6D766F6661616474203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252760.456:10328): pid=42912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252760.458:10329): pid=42912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252762.634:10330): pid=42912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252762.634:10331): pid=42912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252762.637:10332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252762.637:10333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252763.648:10334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252763.648:10335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252763.701:10336): pid=43018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252763.701:10337): pid=43018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C686E7A6676676A6362677866616A63766D636262787177736C7061736C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252763.701:10338): pid=43018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252763.703:10339): pid=43018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252763.992:10340): pid=43018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252763.992:10341): pid=43018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252763.996:10342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252763.996:10343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252764.389:10344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252764.389:10345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252764.451:10346): pid=43038 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252764.453:10347): pid=43038 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63716E6A726379786B6D7A717471767A74716C6A71797574746964617369716B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252764.453:10348): pid=43038 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252764.455:10349): pid=43038 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252767.722:10350): pid=43038 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252767.723:10351): pid=43038 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252767.727:10352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252767.727:10353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252767.942:10354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252767.942:10355): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252768.001:10356): pid=43055 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252768.001:10357): pid=43055 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627875656A6E6E71766B74736D7879636C7178726D6C6E767674676C6561656F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252768.002:10358): pid=43055 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252768.004:10359): pid=43055 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252771.256:10360): pid=43055 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252771.256:10361): pid=43055 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252771.261:10362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252771.261:10363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252771.433:10364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252771.433:10365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252771.497:10366): pid=43072 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252771.498:10367): pid=43072 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F787A6D726E73647469756F66687876726675797A737575686A6164736667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252771.498:10368): pid=43072 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252771.501:10369): pid=43072 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252771.678:10370): pid=43072 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252771.679:10371): pid=43072 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252771.682:10372): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252771.682:10373): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252771.867:10374): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252771.867:10375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252771.914:10376): pid=43088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252771.914:10377): pid=43088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C7375646864736677716462707971717067786975696667786D636E667372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252771.914:10378): pid=43088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252771.915:10379): pid=43088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252772.058:10380): pid=43088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252772.058:10381): pid=43088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252772.062:10382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252772.062:10383): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252772.225:10384): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252772.225:10385): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252772.276:10386): pid=43104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252772.276:10387): pid=43104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7867626C6761796B616A6C69756F6A746D6E6C6262756162617466646C7266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252772.277:10388): pid=43104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252772.279:10389): pid=43104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252772.594:10390): pid=43104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252772.594:10391): pid=43104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252772.598:10392): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252772.599:10393): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252772.964:10394): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252772.964:10395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252773.024:10396): pid=43122 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252773.024:10397): pid=43122 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616664786B7462616E6E71736A716D6E74756C676A746F616E6B6A797A656A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252773.025:10398): pid=43122 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252773.027:10399): pid=43122 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252774.535:10400): pid=43122 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252774.536:10401): pid=43122 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252774.542:10402): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252774.542:10403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252774.919:10404): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252774.920:10405): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252774.985:10406): pid=43154 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252774.985:10407): pid=43154 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6564697377736D77626E69786775687461777A6B78616B7064737A707561646D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252774.986:10408): pid=43154 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252774.988:10409): pid=43154 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252775.171:10410): pid=43154 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252775.171:10411): pid=43154 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252775.175:10412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252775.175:10413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252775.408:10414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252775.408:10415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252775.466:10416): pid=43170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252775.466:10417): pid=43170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C7A6B6C676C616966686D616E7365647875787561676A747278696179696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252775.467:10418): pid=43170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252775.470:10419): pid=43170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252775.649:10420): pid=43170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252775.649:10421): pid=43170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252775.653:10422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252775.653:10423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252775.867:10424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252775.867:10425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252775.892:10426): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252775.893:10427): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252775.933:10428): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252775.934:10429): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252775.965:10430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252775.965:10431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252776.144:10432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252776.144:10433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252776.194:10434): pid=43221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252776.194:10435): pid=43221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D676C7065706B6F736E796E7578666D6B756D6867776478726C62776B6665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252776.194:10436): pid=43221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252776.195:10437): pid=43221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252776.354:10438): pid=43221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252776.354:10439): pid=43221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252776.357:10440): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252776.357:10441): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252776.402:10442): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252776.402:10443): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252776.434:10444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252776.434:10445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252776.475:10446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252776.475:10447): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781252776.503:10448): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252776.503:10449): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252776.544:10450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252776.544:10451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252776.611:10452): pid=43264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252776.611:10453): pid=43264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7964716C76647A647163776675626D766978746C706C777568706A65687A6A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252776.612:10454): pid=43264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252776.613:10455): pid=43264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252776.785:10456): pid=43264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252776.785:10457): pid=43264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252776.789:10458): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252776.789:10459): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252776.831:10460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252776.831:10461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252776.848:10462): pid=43275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781252776.864:10463): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252776.864:10464): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781252777.118:10465): pid=43267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43275 suid=74 rport=56020 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252777.119:10466): pid=43267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43275 suid=74 rport=56020 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781252777.178:10467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252777.178:10468): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252777.235:10469): pid=43296 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252777.235:10470): pid=43296 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6469737565766E797473696F767669737271786F6B6B707A73616463687774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252777.236:10471): pid=43296 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252777.238:10472): pid=43296 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252777.409:10473): pid=43296 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252777.410:10474): pid=43296 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252777.413:10475): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252777.413:10476): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252777.606:10477): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252777.606:10478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252777.672:10479): pid=43313 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252777.672:10480): pid=43313 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F6A736F65637A796F6C6F6A766170737371746A73656968656B7761647764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252777.673:10481): pid=43313 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252777.675:10482): pid=43313 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252777.849:10483): pid=43313 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252777.849:10484): pid=43313 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252777.851:10485): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252777.851:10486): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252778.191:10487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252778.191:10488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252778.238:10489): pid=43330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252778.238:10490): pid=43330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796267706C7375796A64797863766566716E62687070766872696F6463637968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252778.239:10491): pid=43330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252778.241:10492): pid=43330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252778.443:10493): pid=43330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252778.444:10494): pid=43330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252778.446:10495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252778.447:10496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252778.830:10497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252778.830:10498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252778.878:10499): pid=43347 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252778.878:10500): pid=43347 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D62686E6872697A686379616871777A6B67716C7A6867787376636175686B72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252778.878:10501): pid=43347 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252778.881:10502): pid=43347 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252779.003:10503): pid=43267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252779.160:10504): pid=43347 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252779.161:10505): pid=43347 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252779.165:10506): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252779.165:10507): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252779.454:10508): pid=43356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252779.572:10509): pid=43355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43356 suid=74 rport=38298 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252779.572:10510): pid=43355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43356 suid=74 rport=38298 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781252779.582:10511): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252779.582:10512): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252779.633:10513): pid=43370 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252779.634:10514): pid=43370 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77666A6F786D6F7A77756E726C726C6C636475696E6576697A6E64646B64747A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252779.634:10515): pid=43370 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252779.638:10516): pid=43370 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252780.156:10517): pid=43355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pzuser" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252781.094:10518): pid=43267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=43275 suid=74 rport=56020 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252781.094:10519): pid=43267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43275 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252781.095:10520): pid=43267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252781.095:10521): pid=43267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252781.403:10522): pid=43376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252781.616:10523): pid=43375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43376 suid=74 rport=55374 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252781.616:10524): pid=43375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43376 suid=74 rport=55374 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252782.956:10525): pid=43370 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252782.956:10526): pid=43370 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252782.961:10527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252782.961:10528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252783.139:10529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252783.139:10530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781252783.147:10531): pid=43375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781252783.199:10532): pid=43390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252783.199:10533): pid=43390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6574676B79756E697A6F6F6866716474776168626C6A65726E7A67796B626B75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252783.200:10534): pid=43390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252783.202:10535): pid=43390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252784.371:10536): pid=43355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=43356 suid=74 rport=38298 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252784.371:10537): pid=43355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43356 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252784.373:10538): pid=43355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252784.373:10539): pid=43355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252786.451:10540): pid=43390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252786.451:10541): pid=43390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252786.454:10542): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252786.454:10543): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252786.675:10544): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252786.675:10545): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252786.723:10546): pid=43407 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252786.723:10547): pid=43407 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7171656F71636B637569726775766D6E796C796168746274637A746C6B6E6665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252786.723:10548): pid=43407 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252786.726:10549): pid=43407 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252786.910:10550): pid=43407 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252786.910:10551): pid=43407 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252786.914:10552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252786.914:10553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252787.158:10554): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252787.158:10555): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252787.205:10556): pid=43423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252787.205:10557): pid=43423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77696B766C73756B6C646A737978706F6F66786C7476786E7A6F676D646B6E70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252787.205:10558): pid=43423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252787.207:10559): pid=43423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252787.368:10560): pid=43423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252787.368:10561): pid=43423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252787.371:10562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252787.371:10563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252787.564:10564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252787.564:10565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252787.627:10566): pid=43439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252787.627:10567): pid=43439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757671736A61717670696C6776786D736D65767278617A74696E6370706A6775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252787.629:10568): pid=43439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252787.631:10569): pid=43439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252787.922:10570): pid=43439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252787.922:10571): pid=43439 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252787.925:10572): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252787.925:10573): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252788.371:10574): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252788.371:10575): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252788.424:10576): pid=43457 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252788.424:10577): pid=43457 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E7767757664746678627968626B71667A617362706170657064716D676875203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252788.425:10578): pid=43457 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252788.426:10579): pid=43457 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252789.185:10580): pid=43472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252789.283:10581): pid=43471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43472 suid=74 rport=57384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252789.283:10582): pid=43471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43472 suid=74 rport=57384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252789.788:10583): pid=43471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="postgres" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AVC msg=audit(1781252789.806:10584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { start } for auid=n/a uid=0 gid=0 cmdline="" function="bus_unit_method_start_generic" scontext=system_u:system_r:certmonger_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=0 exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'UID="root" AUID="unset" AUID="root" UID="root" GID="root" SAUID="root"
type=USER_END msg=audit(1781252789.904:10585): pid=43457 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252789.905:10586): pid=43457 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252789.909:10587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252789.909:10588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252790.278:10589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252790.278:10590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252790.341:10591): pid=43493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252790.342:10592): pid=43493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746372766D6F676E6B646468796779646F73726B6D7869637476777870697768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252790.342:10593): pid=43493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252790.345:10594): pid=43493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252790.635:10595): pid=43493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252790.635:10596): pid=43493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252790.638:10597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252790.638:10598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252790.797:10599): pid=43374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252790.922:10600): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252790.922:10601): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252790.980:10602): pid=43513 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252790.980:10603): pid=43513 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C6571727269676273696C7362756A76626566697673776C61706878696A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252790.981:10604): pid=43513 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252790.983:10605): pid=43513 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252792.551:10606): pid=43471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=43472 suid=74 rport=57384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252792.552:10607): pid=43471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43472 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252792.553:10608): pid=43471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252792.553:10609): pid=43471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252794.074:10610): pid=43513 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252794.074:10611): pid=43513 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252794.080:10612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252794.081:10613): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252794.262:10614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252794.262:10615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252794.320:10616): pid=43530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252794.320:10617): pid=43530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C6E64636E796B6C786F627263767A64686C677071646B687A737A6A737662203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252794.321:10618): pid=43530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252794.324:10619): pid=43530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252797.437:10620): pid=43530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252797.437:10621): pid=43530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252797.440:10622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252797.441:10623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252797.608:10624): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252797.608:10625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252797.657:10626): pid=43547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252797.657:10627): pid=43547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65756469626D68716B62667771636E68627A6D6A776F756F657172757864766B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252797.658:10628): pid=43547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252797.660:10629): pid=43547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252797.797:10630): pid=43547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252797.798:10631): pid=43547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252797.801:10632): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252797.801:10633): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252797.946:10634): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252797.946:10635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252797.989:10636): pid=43563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252797.989:10637): pid=43563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D787177756E6C7461627463736D6B6C67626C6964777179717871647066676A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252797.989:10638): pid=43563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252797.990:10639): pid=43563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252798.144:10640): pid=43563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252798.144:10641): pid=43563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252798.148:10642): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252798.148:10643): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252798.377:10644): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252798.377:10645): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252798.433:10646): pid=43579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252798.433:10647): pid=43579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69746C7466616D747574777072617668666E69736B666F77656462756C666C67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252798.434:10648): pid=43579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252798.436:10649): pid=43579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252798.733:10650): pid=43579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252798.734:10651): pid=43579 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252798.738:10652): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252798.738:10653): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252799.175:10654): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252799.175:10655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252799.230:10656): pid=43597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252799.230:10657): pid=43597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667261616166797274737873616C697375786172677A7863696D787A746F7579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252799.231:10658): pid=43597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252799.233:10659): pid=43597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252801.681:10660): pid=43597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252801.682:10661): pid=43597 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252801.687:10662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252801.687:10663): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252801.997:10664): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252801.997:10665): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252802.060:10666): pid=43725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252802.060:10667): pid=43725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63786A6C64646D6F6C66766666737A79716C666963697A6872796F6B67686E79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252802.061:10668): pid=43725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252802.064:10669): pid=43725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252808.790:10670): pid=43725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252808.791:10671): pid=43725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252808.796:10672): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252808.796:10673): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252809.028:10674): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252809.028:10675): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252809.086:10676): pid=43792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252809.087:10677): pid=43792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7973746A68736E7569796F776F7565736664707967716C6777737A6168767062203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252809.088:10678): pid=43792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252809.092:10679): pid=43792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252809.345:10680): pid=43792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252809.345:10681): pid=43792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252809.349:10682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252809.349:10683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252809.600:10684): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252809.600:10685): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252809.655:10686): pid=43819 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252809.656:10687): pid=43819 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F767571727174756E6B6A646E636A716D617A6F746A6A697661747166697661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252809.656:10688): pid=43819 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252809.660:10689): pid=43819 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252814.154:10690): pid=43819 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252814.154:10691): pid=43819 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252814.158:10692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252814.158:10693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252814.255:10694): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252814.255:10695): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252814.314:10696): pid=43921 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252814.316:10697): pid=43921 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796E6E7A786266717561766B766D7775666F617469746C716E746C67706B676A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252814.316:10698): pid=43921 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252814.320:10699): pid=43921 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252818.823:10700): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252818.854:10701): pid=43987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43988 suid=74 rport=37894 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252818.855:10702): pid=43987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=43988 suid=74 rport=37894 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252818.978:10703): pid=43921 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252818.978:10704): pid=43921 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252818.981:10705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252818.981:10706): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252819.068:10707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252819.068:10708): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781252819.092:10709): pid=43987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="git" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781252819.132:10710): pid=44013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252819.132:10711): pid=44013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7773636266666F66757172747066737A6279766670766865766F676C6F6A7577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252819.133:10712): pid=44013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252819.136:10713): pid=44013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252821.817:10714): pid=43987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=43988 suid=74 rport=37894 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252821.817:10715): pid=43987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43988 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252821.818:10716): pid=43987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=43987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252821.818:10717): pid=43987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252833.863:10718): pid=44013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252833.863:10719): pid=44013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252833.868:10720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252833.868:10721): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252833.954:10722): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252833.954:10723): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252834.015:10724): pid=44209 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252834.016:10725): pid=44209 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767871736E7A76616C7071677863616965756378616164697A6F6265616C6161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252834.016:10726): pid=44209 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252834.019:10727): pid=44209 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252837.103:10728): pid=44209 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252837.103:10729): pid=44209 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252837.108:10730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252837.108:10731): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252837.212:10732): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252837.213:10733): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252837.275:10734): pid=44297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252837.276:10735): pid=44297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6673637763777065656C6D63726E6C686A62776363756366786A77617A6C6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252837.276:10736): pid=44297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252837.279:10737): pid=44297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252840.256:10738): pid=44297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252840.256:10739): pid=44297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252840.260:10740): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252840.260:10741): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252840.340:10742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252840.340:10743): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252840.403:10744): pid=44387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252840.403:10745): pid=44387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E78686D76797071616266776578746771626F6A63656C716C61736D6163766B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252840.404:10746): pid=44387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252840.406:10747): pid=44387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252842.554:10748): pid=44387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252842.555:10749): pid=44387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252842.559:10750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252842.559:10751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252842.655:10752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252842.655:10753): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252842.705:10754): pid=44465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252842.705:10755): pid=44465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A7161746A63787A6E6667796E67766F737067717A6D6A757273657877786E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252842.706:10756): pid=44465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252842.709:10757): pid=44465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252844.682:10758): pid=44465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252844.682:10759): pid=44465 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252844.686:10760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252844.686:10761): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252844.780:10762): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252844.780:10763): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252844.843:10764): pid=44542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252844.844:10765): pid=44542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B6D62796D757861746974696A6E6C6F74666479706D6C64636F636A727574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252844.845:10766): pid=44542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252844.848:10767): pid=44542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252850.079:10768): pid=44542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252850.079:10769): pid=44542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252850.083:10770): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252850.083:10771): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252850.175:10772): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252850.175:10773): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252850.236:10774): pid=44632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252850.236:10775): pid=44632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7961657067767673696665786177646778666B777779726975797863646B7469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252850.237:10776): pid=44632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252850.239:10777): pid=44632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252854.599:10778): pid=44632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252854.600:10779): pid=44632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252854.603:10780): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252854.603:10781): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252854.664:10782): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252854.664:10783): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252854.706:10784): pid=44723 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252854.706:10785): pid=44723 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6C7872686E6B736B7A686F637963747A6364686261726B75636D6C79756F64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252854.707:10786): pid=44723 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252854.708:10787): pid=44723 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252857.310:10788): pid=44723 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252857.310:10789): pid=44723 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252857.315:10790): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252857.315:10791): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252857.397:10792): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252857.397:10793): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252857.464:10794): pid=44815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252857.464:10795): pid=44815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7772797673617870767175667A61737A6769736D6F71686E796E7A626D7A6C6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252857.465:10796): pid=44815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252857.467:10797): pid=44815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252868.205:10798): pid=44815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252868.205:10799): pid=44815 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252868.209:10800): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252868.210:10801): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252868.310:10802): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252868.310:10803): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252868.374:10804): pid=44907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252868.375:10805): pid=44907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B64767671666267676E6A65716B70706A767567726A6364717275796B796D70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252868.376:10806): pid=44907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252868.378:10807): pid=44907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252870.622:10808): pid=44960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=44960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252870.754:10809): pid=44959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=44960 suid=74 rport=41698 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252870.755:10810): pid=44959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=44960 suid=74 rport=41698 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252871.388:10811): pid=44959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="testserver" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252873.608:10812): pid=44959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=44960 suid=74 rport=41698 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252873.608:10813): pid=44959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=44960 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252873.609:10814): pid=44959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=44959 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252873.609:10815): pid=44959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252874.890:10816): pid=44907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252874.890:10817): pid=44907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252874.895:10818): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252874.895:10819): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252874.987:10820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252874.987:10821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252875.049:10822): pid=45013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252875.049:10823): pid=45013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C70617A787A716C6C6C7765707563756F6F7267686771796562786F63777869203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252875.050:10824): pid=45013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252875.052:10825): pid=45013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252882.336:10826): pid=45081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=45081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252882.545:10827): pid=45080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=45081 suid=74 rport=49912 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252882.546:10828): pid=45080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=45081 suid=74 rport=49912 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252882.606:10829): pid=45013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252882.606:10830): pid=45013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252882.610:10831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252882.610:10832): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252882.704:10833): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252882.704:10834): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252882.765:10835): pid=45107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252882.766:10836): pid=45107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A766E7275616B666B6773786B7A6D646C6B6573776F6A6E616D69627568726A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252882.766:10837): pid=45107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252882.768:10838): pid=45107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252883.485:10839): pid=45080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="matheus" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252886.311:10840): pid=45080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=45081 suid=74 rport=49912 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252886.312:10841): pid=45080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=45081 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252886.313:10842): pid=45080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=45080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252886.313:10843): pid=45080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252888.036:10844): pid=45107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252888.036:10845): pid=45107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252888.040:10846): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252888.040:10847): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252888.131:10848): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252888.131:10849): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252888.192:10850): pid=45202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252888.192:10851): pid=45202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A6E727576696B6C716B6C76666F736375697669656E696572686B6B707868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252888.193:10852): pid=45202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252888.195:10853): pid=45202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252891.408:10854): pid=45202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252891.408:10855): pid=45202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252891.412:10856): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252891.412:10857): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252891.501:10858): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252891.501:10859): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252891.562:10860): pid=45292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252891.562:10861): pid=45292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626161766661746D657570706966696666756B78717976647862617174776B6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252891.563:10862): pid=45292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252891.565:10863): pid=45292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252899.545:10864): pid=45371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=45371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252899.813:10865): pid=45370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=45371 suid=74 rport=51836 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252899.813:10866): pid=45370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=45371 suid=74 rport=51836 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252900.097:10867): pid=45292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252900.098:10868): pid=45292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252900.101:10869): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252900.101:10870): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252900.191:10871): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252900.191:10872): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252900.244:10873): pid=45397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252900.244:10874): pid=45397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6575686F786A6167766E7367686E7A6A787675637973746777776275726D79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252900.245:10875): pid=45397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252900.247:10876): pid=45397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252901.011:10877): pid=45370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252904.908:10878): pid=45370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=45371 suid=74 rport=51836 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252904.908:10879): pid=45370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=45371 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252904.910:10880): pid=45370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=45370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252904.910:10881): pid=45370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252912.880:10882): pid=45397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252912.880:10883): pid=45397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252912.886:10884): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252912.886:10885): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252912.956:10886): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252912.956:10887): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252913.019:10888): pid=45895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252913.020:10889): pid=45895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767462717069616565786F636E76706E68686C726861786676776465776B6664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252913.022:10890): pid=45895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252913.023:10891): pid=45895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252916.632:10892): pid=45895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252916.633:10893): pid=45895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252916.636:10894): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252916.636:10895): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252916.841:10896): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252916.841:10897): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252916.872:10898): pid=46141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252916.872:10899): pid=46141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70646B7A736374627A6E756B726A6D746F6D617A6F6C7179726D75736A737579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252916.873:10900): pid=46141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252916.874:10901): pid=46141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252920.751:10902): pid=46141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252920.751:10903): pid=46141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252920.754:10904): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252920.755:10905): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252920.839:10906): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252920.839:10907): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252920.900:10908): pid=46231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252920.900:10909): pid=46231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6163646B6D71626C6D6479776C7A676C736D746E75667361636E707362677576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252920.901:10910): pid=46231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252920.903:10911): pid=46231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252925.844:10912): pid=46231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252925.844:10913): pid=46231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252925.848:10914): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252925.848:10915): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252925.948:10916): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252925.948:10917): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252926.012:10918): pid=46334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252926.013:10919): pid=46334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697363687A6A656F7769686E6F6A6173746F6E707765646B6B6A7069617A6877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252926.013:10920): pid=46334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252926.015:10921): pid=46334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252926.816:10922): pid=46362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252926.912:10923): pid=46361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46362 suid=74 rport=39804 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252926.912:10924): pid=46361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46362 suid=74 rport=39804 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252927.410:10925): pid=46361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="minecraft" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252927.549:10926): pid=46364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252927.679:10927): pid=46363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=46364 suid=74 rport=34138 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252927.679:10928): pid=46363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=46364 suid=74 rport=34138 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252928.265:10929): pid=46334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252928.265:10930): pid=46334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252928.269:10931): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252928.269:10932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252928.339:10933): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252928.339:10934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252928.399:10935): pid=46414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252928.399:10936): pid=46414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65697878757868776A727A6A6A637769726B707077696B716578706575796266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252928.400:10937): pid=46414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252928.403:10938): pid=46414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252928.727:10939): pid=46363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252930.459:10940): pid=46414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252930.459:10941): pid=46414 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252930.463:10942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252930.463:10943): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252930.529:10944): pid=46361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46362 suid=74 rport=39804 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252930.529:10945): pid=46361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46362 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252930.530:10946): pid=46361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46361 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252930.530:10947): pid=46361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252930.559:10948): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252930.559:10949): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252930.621:10950): pid=46496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252930.622:10951): pid=46496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6173686D79796F636A76727466617A667077676D6C6A656761636573776F6472203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252930.623:10952): pid=46496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252930.625:10953): pid=46496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252932.489:10954): pid=46363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46364 suid=74 rport=34138 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252932.490:10955): pid=46363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46364 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252932.491:10956): pid=46363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252932.491:10957): pid=46363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781252933.880:10958): pid=46558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46558 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252933.911:10959): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46558 suid=74 rport=56086 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252933.911:10960): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46558 suid=74 rport=56086 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252934.154:10961): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jayesh" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252936.004:10962): pid=46496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252936.004:10963): pid=46496 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252936.008:10964): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252936.008:10965): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252936.095:10966): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252936.095:10967): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252936.156:10968): pid=46595 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252936.156:10969): pid=46595 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7477736B6F6C786E6976747670736A6A6D7366626E7365776B6B7A657070776C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252936.157:10970): pid=46595 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252936.159:10971): pid=46595 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252937.730:10972): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46558 suid=74 rport=56086 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252937.731:10973): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46558 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252937.732:10974): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252937.732:10975): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252939.180:10976): pid=46595 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252939.180:10977): pid=46595 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252939.183:10978): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252939.184:10979): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252939.275:10980): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252939.275:10981): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252939.337:10982): pid=46682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252939.338:10983): pid=46682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C6F777966756C6F73616E75616969716B676A77766B796F6A6E796E786B79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252939.338:10984): pid=46682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252939.340:10985): pid=46682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252941.442:10986): pid=46682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252941.443:10987): pid=46682 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252941.447:10988): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252941.447:10989): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252941.526:10990): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252941.526:10991): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252941.587:10992): pid=46759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252941.587:10993): pid=46759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E757A626A756A717970657A6D6C78636E6E746D6270707363686F7272636C6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252941.588:10994): pid=46759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252941.590:10995): pid=46759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252944.795:10996): pid=46880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=46880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252944.796:10997): pid=46787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46880 suid=74 rport=54812 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252944.796:10998): pid=46787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46880 suid=74 rport=54812 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=61.184.21.192 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252945.814:10999): pid=46787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ecomm" exe="/usr/sbin/sshd" hostname=61.184.21.192 addr=61.184.21.192 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252946.173:11000): pid=46759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252946.174:11001): pid=46759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252946.178:11002): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252946.178:11003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252946.270:11004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252946.270:11005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252946.321:11006): pid=46918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252946.321:11007): pid=46918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A7168626C7279726665676D7A6F7667747370676E766A6C66646E7977796F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252946.322:11008): pid=46918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252946.324:11009): pid=46918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252950.729:11010): pid=46918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252950.729:11011): pid=46918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252950.733:11012): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252950.733:11013): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252950.826:11014): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252950.826:11015): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252950.884:11016): pid=47020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252950.885:11017): pid=47020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C7070717362726468687364706A6D70756F7773777A6C686A6B6E666F6C6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252950.886:11018): pid=47020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252950.889:11019): pid=47020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252953.657:11020): pid=47020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252953.658:11021): pid=47020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252953.660:11022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252953.660:11023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252953.746:11024): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252953.746:11025): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252953.794:11026): pid=47112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252953.794:11027): pid=47112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766179637862717A6E7270776D6563717773746263766E6474696C6B67737561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252953.795:11028): pid=47112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252953.797:11029): pid=47112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252956.784:11030): pid=47112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252956.784:11031): pid=47112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252956.789:11032): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252956.789:11033): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252956.867:11034): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252956.867:11035): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252956.921:11036): pid=47203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252956.922:11037): pid=47203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B65776A677362726575696975626B6E6C6464616876637975616561636C65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252956.922:11038): pid=47203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252956.924:11039): pid=47203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252958.178:11040): pid=47232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=47232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252958.312:11041): pid=47231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=47232 suid=74 rport=45080 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252958.312:11042): pid=47231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=47232 suid=74 rport=45080 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781252958.960:11043): pid=47231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="git" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252959.678:11044): pid=47203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252959.678:11045): pid=47203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252959.683:11046): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252959.684:11047): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252959.756:11048): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252959.756:11049): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252959.821:11050): pid=47297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252959.821:11051): pid=47297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74717A73726962677178726878636E7170776B6F627A7271726F6571676A796E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252959.822:11052): pid=47297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252959.825:11053): pid=47297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252961.784:11054): pid=47231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47232 suid=74 rport=45080 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252961.784:11055): pid=47231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=47232 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252961.786:11056): pid=47231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=47231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252961.786:11057): pid=47231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252963.012:11058): pid=47297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252963.012:11059): pid=47297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252963.017:11060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252963.017:11061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252963.108:11062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252963.108:11063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252963.169:11064): pid=47385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252963.170:11065): pid=47385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B796B726670677A7671626F67747876727A6E726667787663676F77686A746C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252963.170:11066): pid=47385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252963.172:11067): pid=47385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252966.800:11068): pid=47385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252966.800:11069): pid=47385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252966.804:11070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252966.804:11071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252966.901:11072): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252966.901:11073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252966.963:11074): pid=47477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252966.964:11075): pid=47477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79726E6D666F6D7364636279767670766D6271787076676E7761766574776A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252966.965:11076): pid=47477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252966.967:11077): pid=47477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252969.600:11078): pid=47477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252969.600:11079): pid=47477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252969.604:11080): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252969.604:11081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252969.682:11082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252969.682:11083): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252969.739:11084): pid=47567 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252969.739:11085): pid=47567 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72666A7362786D70676172647A74796D6568696770686774746873747676766D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252969.740:11086): pid=47567 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252969.742:11087): pid=47567 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252972.135:11088): pid=47567 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252972.135:11089): pid=47567 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252972.138:11090): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252972.138:11091): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252972.218:11092): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252972.218:11093): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252972.275:11094): pid=47656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252972.275:11095): pid=47656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F7271646D667472776D6668656462747766756F6A7974636B71756A676C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252972.276:11096): pid=47656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252972.278:11097): pid=47656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252975.380:11098): pid=47656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252975.381:11099): pid=47656 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252975.385:11100): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252975.385:11101): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252975.470:11102): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252975.470:11103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252975.530:11104): pid=47745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252975.530:11105): pid=47745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77686365626B6B7272696B786268617A6C6E756B6674777573676B656C756B6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252975.531:11106): pid=47745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252975.534:11107): pid=47745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252979.452:11108): pid=47745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252979.453:11109): pid=47745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252979.457:11110): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252979.457:11111): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252979.534:11112): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252979.535:11113): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252979.596:11114): pid=47836 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252979.596:11115): pid=47836 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E73696A6C716C63746E766D6B6671777067786F6F79727173616D78737562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252979.597:11116): pid=47836 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252979.599:11117): pid=47836 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252982.682:11118): pid=47836 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252982.683:11119): pid=47836 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252982.686:11120): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252982.686:11121): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252982.777:11122): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252982.777:11123): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252982.837:11124): pid=47929 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252982.837:11125): pid=47929 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C7672716A6779716C6E6F71776478756E6165707A68716A6D756E63616467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252982.838:11126): pid=47929 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252982.841:11127): pid=47929 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252985.655:11128): pid=47929 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252985.655:11129): pid=47929 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252985.660:11130): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252985.660:11131): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252986.928:11132): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252986.928:11133): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252986.989:11134): pid=48020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252986.990:11135): pid=48020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63697477696B7A6979667A62766C6B79767374796A76766163666E6971626575203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252986.990:11136): pid=48020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252986.992:11137): pid=48020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252987.290:11138): pid=48020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252987.291:11139): pid=48020 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252987.295:11140): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252987.295:11141): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252987.632:11142): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252987.632:11143): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252987.694:11144): pid=48040 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252987.694:11145): pid=48040 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D6B6276796E646E676E736E64797867676B6A766B767673756B646E697166203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252987.694:11146): pid=48040 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252987.697:11147): pid=48040 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252990.267:11148): pid=48045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=48045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781252990.268:11149): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=48045 suid=74 rport=56238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.10.197.168 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781252990.268:11150): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=48045 suid=74 rport=56238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.10.197.168 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781252991.152:11151): pid=48040 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252991.153:11152): pid=48040 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252991.157:11153): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252991.157:11154): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252991.328:11155): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252991.328:11156): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781252991.332:11157): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=176.10.197.168 addr=176.10.197.168 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781252991.385:11158): pid=48059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252991.385:11159): pid=48059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F6F6C636E6867646E67626D697768736C6B656578726D676872696579686E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252991.385:11160): pid=48059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252991.387:11161): pid=48059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781252993.301:11162): pid=48063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=176.10.197.168 addr=176.10.197.168 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781252994.608:11163): pid=48059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252994.608:11164): pid=48059 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252994.613:11165): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252994.613:11166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781252994.742:11167): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=176.10.197.168 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252994.781:11168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252994.781:11169): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252994.841:11170): pid=48077 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252994.841:11171): pid=48077 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716573667871676768647262786263776B6A667A6F69637A796E676D796C7370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252994.841:11172): pid=48077 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252994.843:11173): pid=48077 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252995.031:11174): pid=48077 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252995.032:11175): pid=48077 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252995.037:11176): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252995.037:11177): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781252995.065:11178): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48045 suid=74 rport=56238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.10.197.168 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252995.065:11179): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=48045 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781252995.067:11180): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=48044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781252995.067:11181): pid=48044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=176.10.197.168 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781252995.240:11182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252995.240:11183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252995.305:11184): pid=48093 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252995.305:11185): pid=48093 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7574677863686E6179726D66706872727A76747A786577626C6E7478756B6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252995.305:11186): pid=48093 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252995.308:11187): pid=48093 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252995.498:11188): pid=48093 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252995.498:11189): pid=48093 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252995.502:11190): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252995.502:11191): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252995.666:11192): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252995.666:11193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252995.721:11194): pid=48109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252995.722:11195): pid=48109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E79686571756C67767472736665646E6D77786E70666F66617667746A6562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252995.722:11196): pid=48109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252995.724:11197): pid=48109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252996.032:11198): pid=48109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252996.032:11199): pid=48109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252996.036:11200): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252996.036:11201): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252996.604:11202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252996.604:11203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252996.668:11204): pid=48127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252996.668:11205): pid=48127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A77656278706B68767868636A6464797067706F766B78676B6967686C7564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252996.669:11206): pid=48127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252996.671:11207): pid=48127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252998.436:11208): pid=48127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781252998.437:11209): pid=48127 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781252998.441:11210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781252998.441:11211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781252998.762:11212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781252998.762:11213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781252998.823:11214): pid=48231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781252998.823:11215): pid=48231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C7471757067787461716277776973786A756F75737061636F696B6F6D6A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781252998.824:11216): pid=48231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781252998.828:11217): pid=48231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253001.145:11218): pid=48231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253001.145:11219): pid=48231 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253001.149:11220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253001.149:11221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253001.332:11222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253001.332:11223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253001.393:11224): pid=48285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253001.393:11225): pid=48285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686264796C6172746B6A626B74767577706F7169697468736878676A6C686265203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253001.394:11226): pid=48285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253001.397:11227): pid=48285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253001.612:11228): pid=48285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253001.613:11229): pid=48285 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253001.616:11230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253001.616:11231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253001.766:11232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253001.766:11233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253001.807:11234): pid=48314 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253001.807:11235): pid=48314 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6576726E716E747173746E736B746A65626F7970756C726373627473626475203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253001.807:11236): pid=48314 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253001.808:11237): pid=48314 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253001.998:11238): pid=48314 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253001.998:11239): pid=48314 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253002.001:11240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253002.001:11241): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253002.139:11242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253002.139:11243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253002.162:11244): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253002.162:11245): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253002.204:11246): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253002.204:11247): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253002.232:11248): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253002.232:11249): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253002.274:11250): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253002.274:11251): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253002.337:11252): pid=48363 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253002.338:11253): pid=48363 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667371686F6470617665796C75706672726A776264627462646A667A66767A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253002.338:11254): pid=48363 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253002.340:11255): pid=48363 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253002.516:11256): pid=48363 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253002.516:11257): pid=48363 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253002.520:11258): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253002.521:11259): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253002.559:11260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253002.559:11261): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253002.593:11262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253002.594:11263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253002.637:11264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253002.638:11265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253002.673:11266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253002.673:11267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253002.714:11268): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253002.714:11269): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253002.779:11270): pid=48406 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253002.779:11271): pid=48406 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6E7664726866756A656669776864656B657463796D706B6566616D627565203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253002.780:11272): pid=48406 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253002.782:11273): pid=48406 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253002.963:11274): pid=48406 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253002.964:11275): pid=48406 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253002.968:11276): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253002.968:11277): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253003.005:11278): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253003.006:11279): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253003.033:11280): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253003.033:11281): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253003.191:11282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253003.191:11283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253003.251:11284): pid=48436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253003.252:11285): pid=48436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61616A637674666A6C66656E6D726A72706A686761706A756B6272626E787A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253003.252:11286): pid=48436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253003.255:11287): pid=48436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253003.911:11288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253003.923:11289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253003.955:11290): pid=48436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253003.955:11291): pid=48436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253003.960:11292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253003.961:11293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253004.071:11294): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253004.071:11295): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253004.134:11296): pid=48458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253004.134:11297): pid=48458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669616C6F616670736F646769717973787A716F7574686D796374756874796D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253004.135:11298): pid=48458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253004.138:11299): pid=48458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253004.322:11300): pid=48458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253004.323:11301): pid=48458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253004.328:11302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253004.328:11303): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253004.696:11304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253004.697:11305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253004.727:11306): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253004.728:11307): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253004.769:11308): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253004.769:11309): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253004.808:11310): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253004.808:11311): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253004.849:11312): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253004.849:11313): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253004.916:11314): pid=48508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253004.916:11315): pid=48508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E6E676D7169717965786F7271776F676478797A686A64646F676A65707176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253004.917:11316): pid=48508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253004.919:11317): pid=48508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253005.094:11318): pid=48508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253005.095:11319): pid=48508 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253005.099:11320): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.099:11321): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.137:11322): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.137:11323): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253005.190:11324): pid=48526 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253005.190:11325): pid=48526 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7064726770656C63756A766C626B6C6E746B73696D796C756C796164666E7773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253005.191:11326): pid=48526 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253005.193:11327): pid=48526 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253005.351:11328): pid=48526 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253005.352:11329): pid=48526 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253005.356:11330): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.356:11331): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.400:11332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.400:11333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253005.426:11334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.426:11335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.535:11336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.535:11337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253005.564:11338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.565:11339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.607:11340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.607:11341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253005.644:11342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.644:11343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.702:11344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.702:11345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253005.755:11346): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.755:11347): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.800:11348): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.800:11349): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253005.845:11350): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.845:11351): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.889:11352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.889:11353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253005.923:11354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253005.923:11355): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253005.969:11356): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253005.969:11357): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253006.031:11358): pid=48630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253006.032:11359): pid=48630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6261616B726A6C73746E76716E796C636B71636B6C677978777A6267766874203B20414E5349424C455F4153594E435F4449523D2F746D702F2E616E7369626C655F6173796E63202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738313235333030352E3536383134342D3131393537382D37353239393434373535353932312F6173796E635F777261707065722E7079203736373330343731333032332033363030202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738313235333030352E3536383134342D3131393537382D37353239393434373535353932312F416E736962616C6C5A5F636F6D6D616E642E7079205F exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253006.033:11360): pid=48630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253006.036:11361): pid=48630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253006.206:11362): pid=48630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253006.207:11363): pid=48630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253006.211:11364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253006.211:11365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253006.332:11366): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253006.332:11367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253006.380:11368): pid=48651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253006.380:11369): pid=48651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D616E6168796F6B6B7174636A626A716773687A6578726D7868776B62736467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253006.381:11370): pid=48651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253006.383:11371): pid=48651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253006.560:11372): pid=48651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253006.561:11373): pid=48651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253006.564:11374): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253006.564:11375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253016.659:11376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253016.659:11377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253016.723:11378): pid=48795 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253016.723:11379): pid=48795 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78757162686D7367776D78776A6A626364786A6168746E796268656A63787768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253016.724:11380): pid=48795 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253016.727:11381): pid=48795 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253016.869:11382): pid=48795 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253016.870:11383): pid=48795 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253016.873:11384): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253016.873:11385): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253018.361:11386): pid=48860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=48860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253018.635:11387): pid=48858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=48860 suid=74 rport=47004 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253018.635:11388): pid=48858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=48860 suid=74 rport=47004 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253019.785:11389): pid=48858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="testing" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1781253020.610:11390): pid=48879 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=189 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="haclient"
type=GRP_MGMT msg=audit(1781253020.614:11391): pid=48879 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=189 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="haclient"
type=ADD_USER msg=audit(1781253020.879:11392): pid=48886 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="hacluster" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253021.932:11393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8ee4f2f90b684976876742399ae78a62 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253022.240:11394): prog-id=271 op=LOAD
type=BPF msg=audit(1781253022.240:11395): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.240:11396): prog-id=272 op=LOAD
type=BPF msg=audit(1781253022.240:11397): prog-id=273 op=LOAD
type=BPF msg=audit(1781253022.240:11398): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.240:11399): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.244:11400): prog-id=274 op=LOAD
type=BPF msg=audit(1781253022.244:11401): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.244:11402): prog-id=275 op=LOAD
type=BPF msg=audit(1781253022.244:11403): prog-id=276 op=LOAD
type=BPF msg=audit(1781253022.244:11404): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.244:11405): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.246:11406): prog-id=277 op=LOAD
type=BPF msg=audit(1781253022.246:11407): prog-id=278 op=LOAD
type=BPF msg=audit(1781253022.246:11408): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.246:11409): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.247:11410): prog-id=279 op=LOAD
type=BPF msg=audit(1781253022.247:11411): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253022.248:11412): prog-id=280 op=LOAD
type=BPF msg=audit(1781253022.248:11413): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1781253022.299:11414): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libqb-2.0.6-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11415): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="corosynclib-3.1.7-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11416): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-1.19-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11417): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-MD5-2.58-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11418): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-B-0:1.80-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11419): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-FileHandle-0:2.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11420): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Data-Dumper-2.174-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11421): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libnet-3.13-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11422): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-AutoLoader-0:5.74-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11423): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-base-0:2.27-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11424): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-URI-5.09-3.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.300:11425): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Time-Local-2:1.300-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11426): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Mozilla-CA-20200520-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11427): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-if-0:0.60.800-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11428): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-IP-0.41-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11429): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11430): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Net-SSLeay-1.92-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11431): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Escapes-1:1.07-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11432): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Path-2.18-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11433): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-SSL-2.073-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11434): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ANSIColor-5.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11435): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Class-Struct-0:0.66-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11436): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-POSIX-0:1.94-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.301:11437): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IPC-Open3-0:1.21-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11438): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-subs-0:1.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11439): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-Cap-1.17-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11440): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Simple-1:3.42-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11441): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Temp-1:0.231.100-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11442): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-HTTP-Tiny-0.076-461.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11443): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Socket-4:2.031-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11444): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-SelectSaver-0:1.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11445): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Symbol-0:1.08-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11446): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-stat-0:1.09-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11447): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-podlators-1:4.14-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11448): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Perldoc-3.28.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11449): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-ParseWords-3.30-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.302:11450): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Fcntl-0:1.13-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11451): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overloading-0:0.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11452): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-0:1.43-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11453): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-mro-0:1.23-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11454): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Usage-4:2.01-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11455): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-parent-1:0.238-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11456): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-MIME-Base64-3.16-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11457): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Scalar-List-Utils-4:1.56-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11458): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-constant-1.33-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11459): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Errno-0:1.30-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11460): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Basename-0:2.85-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11461): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Std-0:1.12-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11462): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Storable-1:3.21-460.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11463): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overload-0:1.31-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11464): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-vars-0:1.05-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.303:11465): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Long-1:2.52-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11466): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Exporter-5.74-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11467): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Carp-1.50-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11468): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-PathTools-3.78-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11469): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-NDBM_File-0:1.15-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11470): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Encode-4:3.08-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11471): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libs-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11472): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-interpreter-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11473): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11474): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-nss-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11475): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-TimeDate-1:2.33-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11476): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-m4-1.7.3-10.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11477): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libpkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11478): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11479): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-pkg-config-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11480): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-schemas-2.1.5-9.el9_2.4.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11481): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-libs-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11482): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-cluster-libs-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11483): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-tools-2.0-0.62.20160912git.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11484): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="resource-agents-4.10.0-34.el9_2.9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11485): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11486): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnozzle1-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11487): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="corosync-3.1.7-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11488): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-cli-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253022.304:11489): pid=48778 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253022.669:11490): pid=48858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48860 suid=74 rport=47004 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253022.669:11491): pid=48858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=48860 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253022.671:11492): pid=48858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=48858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253022.671:11493): pid=48858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253023.465:11494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253023.465:11495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253023.466:11496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8ee4f2f90b684976876742399ae78a62 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253024.224:11497): pid=50670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=50670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253024.424:11498): pid=50669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=50670 suid=74 rport=34316 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253024.424:11499): pid=50669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=50670 suid=74 rport=34316 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253025.845:11500): pid=50669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ops" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253026.939:11501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253026.939:11502): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253026.987:11503): pid=50687 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253026.988:11504): pid=50687 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A6A676C696C6D78626A6C6E71726864666F677265676277786C776A796C65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253026.988:11505): pid=50687 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253026.993:11506): pid=50687 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253027.158:11507): pid=50687 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253027.158:11508): pid=50687 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253027.162:11509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253027.162:11510): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253028.327:11511): pid=50669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=50670 suid=74 rport=34316 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253028.327:11512): pid=50669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=50670 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253028.328:11513): pid=50669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=50669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253028.328:11514): pid=50669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253030.207:11515): prog-id=281 op=LOAD
type=BPF msg=audit(1781253030.207:11516): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.207:11517): prog-id=282 op=LOAD
type=BPF msg=audit(1781253030.207:11518): prog-id=283 op=LOAD
type=BPF msg=audit(1781253030.207:11519): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.207:11520): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.210:11521): prog-id=284 op=LOAD
type=BPF msg=audit(1781253030.210:11522): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.210:11523): prog-id=285 op=LOAD
type=BPF msg=audit(1781253030.210:11524): prog-id=286 op=LOAD
type=BPF msg=audit(1781253030.210:11525): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.210:11526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.211:11527): prog-id=287 op=LOAD
type=BPF msg=audit(1781253030.211:11528): prog-id=288 op=LOAD
type=BPF msg=audit(1781253030.211:11529): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.211:11530): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.213:11531): prog-id=289 op=LOAD
type=BPF msg=audit(1781253030.213:11532): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.213:11533): prog-id=290 op=LOAD
type=BPF msg=audit(1781253030.213:11534): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253030.378:11535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf287cdde824442caa07483e2992558be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253030.645:11536): prog-id=291 op=LOAD
type=BPF msg=audit(1781253030.645:11537): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.645:11538): prog-id=292 op=LOAD
type=BPF msg=audit(1781253030.646:11539): prog-id=293 op=LOAD
type=BPF msg=audit(1781253030.646:11540): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.646:11541): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.650:11542): prog-id=294 op=LOAD
type=BPF msg=audit(1781253030.650:11543): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.650:11544): prog-id=295 op=LOAD
type=BPF msg=audit(1781253030.650:11545): prog-id=296 op=LOAD
type=BPF msg=audit(1781253030.650:11546): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.650:11547): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.652:11548): prog-id=297 op=LOAD
type=BPF msg=audit(1781253030.652:11549): prog-id=298 op=LOAD
type=BPF msg=audit(1781253030.652:11550): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.652:11551): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.653:11552): prog-id=299 op=LOAD
type=BPF msg=audit(1781253030.654:11553): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253030.654:11554): prog-id=300 op=LOAD
type=BPF msg=audit(1781253030.654:11555): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11556): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-tornado-6.4.2-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11557): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycurl-7.43.0.6-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11558): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-openssl-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11559): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11560): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-zstd-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11561): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-zlib-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11562): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lzo2-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11563): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lzma-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11564): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lz4-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11565): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-bzip2-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11566): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11567): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253030.679:11568): pid=50668 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcs-0.11.4-7.el9_2.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253030.919:11569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253030.919:11570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253030.920:11571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf287cdde824442caa07483e2992558be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253032.213:11572): prog-id=301 op=LOAD
type=BPF msg=audit(1781253032.213:11573): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.214:11574): prog-id=302 op=LOAD
type=BPF msg=audit(1781253032.214:11575): prog-id=303 op=LOAD
type=BPF msg=audit(1781253032.214:11576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.214:11577): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.217:11578): prog-id=304 op=LOAD
type=BPF msg=audit(1781253032.217:11579): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.217:11580): prog-id=305 op=LOAD
type=BPF msg=audit(1781253032.217:11581): prog-id=306 op=LOAD
type=BPF msg=audit(1781253032.217:11582): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.217:11583): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.218:11584): prog-id=307 op=LOAD
type=BPF msg=audit(1781253032.218:11585): prog-id=308 op=LOAD
type=BPF msg=audit(1781253032.218:11586): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.218:11587): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.220:11588): prog-id=309 op=LOAD
type=BPF msg=audit(1781253032.220:11589): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.221:11590): prog-id=310 op=LOAD
type=BPF msg=audit(1781253032.221:11591): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.411:11592): prog-id=311 op=LOAD
type=BPF msg=audit(1781253032.411:11593): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.411:11594): prog-id=312 op=LOAD
type=BPF msg=audit(1781253032.411:11595): prog-id=313 op=LOAD
type=BPF msg=audit(1781253032.411:11596): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.411:11597): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.414:11598): prog-id=314 op=LOAD
type=BPF msg=audit(1781253032.414:11599): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.414:11600): prog-id=315 op=LOAD
type=BPF msg=audit(1781253032.414:11601): prog-id=316 op=LOAD
type=BPF msg=audit(1781253032.415:11602): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.415:11603): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.416:11604): prog-id=317 op=LOAD
type=BPF msg=audit(1781253032.416:11605): prog-id=318 op=LOAD
type=BPF msg=audit(1781253032.416:11606): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.416:11607): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.417:11608): prog-id=319 op=LOAD
type=BPF msg=audit(1781253032.417:11609): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.418:11610): prog-id=320 op=LOAD
type=BPF msg=audit(1781253032.418:11611): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.650:11612): prog-id=321 op=LOAD
type=BPF msg=audit(1781253032.650:11613): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.651:11614): prog-id=322 op=LOAD
type=BPF msg=audit(1781253032.651:11615): prog-id=323 op=LOAD
type=BPF msg=audit(1781253032.651:11616): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.651:11617): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.654:11618): prog-id=324 op=LOAD
type=BPF msg=audit(1781253032.654:11619): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.654:11620): prog-id=325 op=LOAD
type=BPF msg=audit(1781253032.654:11621): prog-id=326 op=LOAD
type=BPF msg=audit(1781253032.654:11622): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.654:11623): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.656:11624): prog-id=327 op=LOAD
type=BPF msg=audit(1781253032.656:11625): prog-id=328 op=LOAD
type=BPF msg=audit(1781253032.656:11626): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.656:11627): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.657:11628): prog-id=329 op=LOAD
type=BPF msg=audit(1781253032.657:11629): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.658:11630): prog-id=330 op=LOAD
type=BPF msg=audit(1781253032.658:11631): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.864:11632): prog-id=331 op=LOAD
type=BPF msg=audit(1781253032.865:11633): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.865:11634): prog-id=332 op=LOAD
type=BPF msg=audit(1781253032.865:11635): prog-id=333 op=LOAD
type=BPF msg=audit(1781253032.865:11636): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.865:11637): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.868:11638): prog-id=334 op=LOAD
type=BPF msg=audit(1781253032.868:11639): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.868:11640): prog-id=335 op=LOAD
type=BPF msg=audit(1781253032.868:11641): prog-id=336 op=LOAD
type=BPF msg=audit(1781253032.868:11642): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.868:11643): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.870:11644): prog-id=337 op=LOAD
type=BPF msg=audit(1781253032.870:11645): prog-id=338 op=LOAD
type=BPF msg=audit(1781253032.870:11646): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.870:11647): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.871:11648): prog-id=339 op=LOAD
type=BPF msg=audit(1781253032.871:11649): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253032.872:11650): prog-id=340 op=LOAD
type=BPF msg=audit(1781253032.872:11651): prog-id=0 op=UNLOAD
type=USER_MGMT msg=audit(1781253033.168:11652): pid=51035 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="haclient" acct="hacluster" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MGMT msg=audit(1781253033.169:11653): pid=51035 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="haclient" acct="hacluster" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253033.732:11654): prog-id=341 op=LOAD
type=BPF msg=audit(1781253033.733:11655): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.733:11656): prog-id=342 op=LOAD
type=BPF msg=audit(1781253033.733:11657): prog-id=343 op=LOAD
type=BPF msg=audit(1781253033.733:11658): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.733:11659): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.736:11660): prog-id=344 op=LOAD
type=BPF msg=audit(1781253033.736:11661): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.736:11662): prog-id=345 op=LOAD
type=BPF msg=audit(1781253033.736:11663): prog-id=346 op=LOAD
type=BPF msg=audit(1781253033.736:11664): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.736:11665): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.738:11666): prog-id=347 op=LOAD
type=BPF msg=audit(1781253033.738:11667): prog-id=348 op=LOAD
type=BPF msg=audit(1781253033.738:11668): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.738:11669): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.739:11670): prog-id=349 op=LOAD
type=BPF msg=audit(1781253033.739:11671): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253033.740:11672): prog-id=350 op=LOAD
type=BPF msg=audit(1781253033.740:11673): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253034.393:11674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pcsd-ruby comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253035.767:11675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pcsd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253035.997:11676): prog-id=351 op=LOAD
type=BPF msg=audit(1781253035.997:11677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253035.997:11678): prog-id=352 op=LOAD
type=BPF msg=audit(1781253035.997:11679): prog-id=353 op=LOAD
type=BPF msg=audit(1781253035.997:11680): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253035.997:11681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.000:11682): prog-id=354 op=LOAD
type=BPF msg=audit(1781253036.000:11683): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.000:11684): prog-id=355 op=LOAD
type=BPF msg=audit(1781253036.000:11685): prog-id=356 op=LOAD
type=BPF msg=audit(1781253036.000:11686): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.000:11687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.002:11688): prog-id=357 op=LOAD
type=BPF msg=audit(1781253036.002:11689): prog-id=358 op=LOAD
type=BPF msg=audit(1781253036.002:11690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.002:11691): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.003:11692): prog-id=359 op=LOAD
type=BPF msg=audit(1781253036.003:11693): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.004:11694): prog-id=360 op=LOAD
type=BPF msg=audit(1781253036.004:11695): prog-id=0 op=UNLOAD
type=USER_AUTH msg=audit(1781253036.144:11696): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:authentication grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253036.161:11697): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253036.202:11698): prog-id=361 op=LOAD
type=BPF msg=audit(1781253036.202:11699): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.202:11700): prog-id=362 op=LOAD
type=BPF msg=audit(1781253036.202:11701): prog-id=363 op=LOAD
type=BPF msg=audit(1781253036.202:11702): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.202:11703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.205:11704): prog-id=364 op=LOAD
type=BPF msg=audit(1781253036.205:11705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.205:11706): prog-id=365 op=LOAD
type=BPF msg=audit(1781253036.205:11707): prog-id=366 op=LOAD
type=BPF msg=audit(1781253036.205:11708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.205:11709): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.207:11710): prog-id=367 op=LOAD
type=BPF msg=audit(1781253036.207:11711): prog-id=368 op=LOAD
type=BPF msg=audit(1781253036.207:11712): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.207:11713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.208:11714): prog-id=369 op=LOAD
type=BPF msg=audit(1781253036.208:11715): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253036.209:11716): prog-id=370 op=LOAD
type=BPF msg=audit(1781253036.209:11717): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1781253037.242:11718): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253037.242:11719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253037.294:11720): pid=51281 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253037.294:11721): pid=51281 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677873696471746B7A61707772617168766F7A72766C65706265646F69736E64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253037.294:11722): pid=51281 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253037.298:11723): pid=51281 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253037.452:11724): pid=51281 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253037.452:11725): pid=51281 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253037.455:11726): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253037.455:11727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253037.804:11728): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:authentication grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253037.831:11729): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253040.374:11730): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:authentication grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253040.387:11731): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253041.510:11732): pid=51299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253041.642:11733): pid=51298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51299 suid=74 rport=48458 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253041.642:11734): pid=51298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51299 suid=74 rport=48458 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253042.301:11735): pid=51298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253046.066:11736): pid=51298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=51299 suid=74 rport=48458 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253046.066:11737): pid=51298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51299 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253046.067:11738): pid=51298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253046.067:11739): pid=51298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253047.318:11740): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:authentication grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253047.345:11741): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253047.532:11742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253047.533:11743): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253047.596:11744): pid=51317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253047.596:11745): pid=51317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77736D767275786267647875657A6F736371636C646A656B6D72676E666C7A79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253047.597:11746): pid=51317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253047.601:11747): pid=51317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253047.761:11748): pid=51317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253047.762:11749): pid=51317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253047.766:11750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253047.766:11751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253049.075:11752): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:authentication grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253049.101:11753): pid=51083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253049.536:11754): pid=51357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253049.567:11755): pid=51356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51357 suid=74 rport=33580 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253049.567:11756): pid=51356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51357 suid=74 rport=33580 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253050.130:11757): pid=51356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="username" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253050.338:11758): prog-id=371 op=LOAD
type=BPF msg=audit(1781253050.338:11759): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.338:11760): prog-id=372 op=LOAD
type=BPF msg=audit(1781253050.338:11761): prog-id=373 op=LOAD
type=BPF msg=audit(1781253050.338:11762): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.338:11763): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.342:11764): prog-id=374 op=LOAD
type=BPF msg=audit(1781253050.342:11765): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.342:11766): prog-id=375 op=LOAD
type=BPF msg=audit(1781253050.342:11767): prog-id=376 op=LOAD
type=BPF msg=audit(1781253050.342:11768): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.342:11769): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.344:11770): prog-id=377 op=LOAD
type=BPF msg=audit(1781253050.344:11771): prog-id=378 op=LOAD
type=BPF msg=audit(1781253050.344:11772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.344:11773): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.345:11774): prog-id=379 op=LOAD
type=BPF msg=audit(1781253050.345:11775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.346:11776): prog-id=380 op=LOAD
type=BPF msg=audit(1781253050.346:11777): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.553:11778): prog-id=381 op=LOAD
type=BPF msg=audit(1781253050.553:11779): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.553:11780): prog-id=382 op=LOAD
type=BPF msg=audit(1781253050.553:11781): prog-id=383 op=LOAD
type=BPF msg=audit(1781253050.553:11782): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.553:11783): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.556:11784): prog-id=384 op=LOAD
type=BPF msg=audit(1781253050.556:11785): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.556:11786): prog-id=385 op=LOAD
type=BPF msg=audit(1781253050.556:11787): prog-id=386 op=LOAD
type=BPF msg=audit(1781253050.556:11788): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.556:11789): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.558:11790): prog-id=387 op=LOAD
type=BPF msg=audit(1781253050.558:11791): prog-id=388 op=LOAD
type=BPF msg=audit(1781253050.558:11792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.558:11793): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.559:11794): prog-id=389 op=LOAD
type=BPF msg=audit(1781253050.559:11795): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253050.560:11796): prog-id=390 op=LOAD
type=BPF msg=audit(1781253050.560:11797): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253053.166:11798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=corosync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253053.188:11799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pacemaker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253053.959:11800): pid=51356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=51357 suid=74 rport=33580 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253053.959:11801): pid=51356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51357 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253053.961:11802): pid=51356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253053.961:11803): pid=51356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253054.393:11804): pid=51473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253054.490:11805): pid=51471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51473 suid=74 rport=50424 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253054.490:11806): pid=51471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51473 suid=74 rport=50424 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253054.996:11807): pid=51471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deployer" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253057.841:11808): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253057.841:11809): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253057.915:11810): pid=51487 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253057.915:11811): pid=51487 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D6C7A736B786970646B716E656E647A676777796A716F6A79756C7A77676E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253057.916:11812): pid=51487 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253057.922:11813): pid=51487 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253058.041:11814): pid=51471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=51473 suid=74 rport=50424 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253058.041:11815): pid=51471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51473 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253058.042:11816): pid=51471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253058.043:11817): pid=51471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253058.106:11818): pid=51487 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253058.107:11819): pid=51487 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253058.112:11820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253058.112:11821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253068.185:11822): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253068.185:11823): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253068.252:11824): pid=51520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253068.253:11825): pid=51520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71666E716F77766E64716E74647771637671716661646E62727563666D6F6F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253068.253:11826): pid=51520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253068.257:11827): pid=51520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253068.418:11828): pid=51520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253068.419:11829): pid=51520 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253068.423:11830): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253068.423:11831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253078.488:11832): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253078.488:11833): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253078.555:11834): pid=51555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253078.555:11835): pid=51555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626778666B6A637A66666273796878796C7369676A6E706C6F796C77766B736E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253078.556:11836): pid=51555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253078.558:11837): pid=51555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253078.686:11838): pid=51555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253078.687:11839): pid=51555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253078.690:11840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253078.690:11841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253084.953:11842): pid=51577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253085.214:11843): pid=51576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51577 suid=74 rport=38636 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253085.214:11844): pid=51576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=51577 suid=74 rport=38636 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253086.372:11845): pid=51576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="tarun" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253088.759:11846): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253088.759:11847): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253088.810:11848): pid=51591 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253088.811:11849): pid=51591 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767A696F63666C6B786E65767A6E696C65786876636165757969746369707475203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253088.811:11850): pid=51591 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253088.814:11851): pid=51591 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253088.978:11852): pid=51591 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253088.978:11853): pid=51591 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253088.982:11854): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253088.982:11855): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253089.542:11856): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253089.542:11857): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253089.609:11858): pid=51608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253089.610:11859): pid=51608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77756479737A69707577787474776C6F6161776A6A676B65676E69796572657A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253089.611:11860): pid=51608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253089.614:11861): pid=51608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253089.800:11862): pid=51608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253089.801:11863): pid=51608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253089.805:11864): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253089.805:11865): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253089.936:11866): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253089.937:11867): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253090.003:11868): pid=51624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253090.003:11869): pid=51624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63786665696D74796F67716A717570697167737763787A676A6E7668716C6367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253090.004:11870): pid=51624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253090.007:11871): pid=51624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253090.197:11872): pid=51624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253090.198:11873): pid=51624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253090.201:11874): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253090.201:11875): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253090.389:11876): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253090.389:11877): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253090.417:11878): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253090.418:11879): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253090.459:11880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253090.459:11881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253090.497:11882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253090.497:11883): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253090.539:11884): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253090.539:11885): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253090.606:11886): pid=51672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253090.607:11887): pid=51672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B746F75696B6970636569647969696B66666970627A71657376616C666B7364203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253090.607:11888): pid=51672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253090.609:11889): pid=51672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253090.781:11890): pid=51672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253090.781:11891): pid=51672 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253090.785:11892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253090.785:11893): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253090.829:11894): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253090.829:11895): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253090.871:11896): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253090.871:11897): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253090.912:11898): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253090.912:11899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253090.946:11900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253090.946:11901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253090.988:11902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253090.988:11903): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253091.053:11904): pid=51715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253091.053:11905): pid=51715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62776568786366796E67726B7176756F787865716E756779767A646873707373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253091.055:11906): pid=51715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253091.058:11907): pid=51715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253091.348:11908): pid=51715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253091.349:11909): pid=51715 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253091.354:11910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253091.354:11911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253091.395:11912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253091.395:11913): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253091.425:11914): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253091.425:11915): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253091.544:11916): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253091.544:11917): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253091.610:11918): pid=51745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253091.610:11919): pid=51745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736574766779766E6C727A756174776F716D6266777A73617971617978696978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253091.611:11920): pid=51745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253091.614:11921): pid=51745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253091.812:11922): pid=51745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253091.812:11923): pid=51745 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253091.817:11924): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253091.817:11925): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253091.984:11926): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253091.985:11927): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253092.035:11928): pid=51761 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253092.035:11929): pid=51761 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F74786B73696B696273666A6C756A777A68696C6E6B78657862666E626E7A67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253092.036:11930): pid=51761 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253092.039:11931): pid=51761 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253092.549:11932): pid=51761 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253092.550:11933): pid=51761 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253092.554:11934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253092.554:11935): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253092.781:11936): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253092.781:11937): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253092.845:11938): pid=51848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253092.845:11939): pid=51848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627A73627775746E6B79786176626F77746271687067766B6C6F79757A6D6F6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253092.846:11940): pid=51848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253092.848:11941): pid=51848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253093.076:11942): pid=51848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253093.076:11943): pid=51848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253093.081:11944): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253093.081:11945): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253093.373:11946): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253093.373:11947): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253093.425:11948): pid=51867 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253093.425:11949): pid=51867 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6C6B62756C74616576686473616362657773706B6C676266707479756F6975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253093.426:11950): pid=51867 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253093.429:11951): pid=51867 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253093.624:11952): pid=51867 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253093.625:11953): pid=51867 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253093.628:11954): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253093.629:11955): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253093.733:11956): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253093.733:11957): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253093.793:11958): pid=51883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253093.793:11959): pid=51883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A696F666A7073657363717A6D66787A626869706D706D696567676D6878756C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253093.794:11960): pid=51883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253093.796:11961): pid=51883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253094.054:11962): pid=51883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253094.054:11963): pid=51883 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253094.059:11964): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253094.059:11965): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253094.381:11966): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253094.381:11967): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253094.438:11968): pid=51899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253094.438:11969): pid=51899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64657966676E6A746B767A777762797A6F666A6F6B68636163766C69736F7661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253094.439:11970): pid=51899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253094.441:11971): pid=51899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253094.591:11972): pid=51899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253094.591:11973): pid=51899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253094.594:11974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253094.594:11975): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253094.721:11976): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253094.721:11977): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253094.773:11978): pid=51915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253094.774:11979): pid=51915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777470627861776F717974636B6E657670656F666D646F6E676572626A677768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253094.774:11980): pid=51915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253094.776:11981): pid=51915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253094.937:11982): pid=51915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253094.937:11983): pid=51915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253094.940:11984): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253094.940:11985): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253095.678:11986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253095.678:11987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253095.738:11988): pid=51931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253095.738:11989): pid=51931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6C7267676A66667863786874637A6C6B6566646266616571706C636B687775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253095.739:11990): pid=51931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253095.742:11991): pid=51931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253095.963:11992): pid=51931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253095.963:11993): pid=51931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253095.967:11994): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253095.967:11995): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253096.369:11996): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253096.369:11997): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253096.434:11998): pid=51958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253096.434:11999): pid=51958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74687377786B736F666D636A637963707A77706367766B656977656B67786378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253096.435:12000): pid=51958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253096.438:12001): pid=51958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253097.050:12002): prog-id=391 op=LOAD
type=SYSCALL msg=audit(1781253097.050:12002): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe492476c0 a2=90 a3=9500000000 items=0 ppid=52238 pid=52239 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253097.050:12002): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326436626633303836663939396130376162353165336235616234643334
type=BPF msg=audit(1781253097.053:12003): prog-id=392 op=LOAD
type=SYSCALL msg=audit(1781253097.053:12003): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2cb46950 a2=90 a3=9500000000 items=0 ppid=52241 pid=52242 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253097.053:12003): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653166393165373637313063313334383661323564353734326134326333
type=BPF msg=audit(1781253097.063:12004): prog-id=393 op=LOAD
type=SYSCALL msg=audit(1781253097.063:12004): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2c878a10 a2=90 a3=9500000000 items=0 ppid=52245 pid=52246 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253097.063:12004): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313639326234663934376663663763393433616639306562643930336166
type=BPF msg=audit(1781253097.098:12005): prog-id=394 op=LOAD
type=SYSCALL msg=audit(1781253097.098:12005): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe4e692a60 a2=90 a3=9500000000 items=0 ppid=52255 pid=52256 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253097.098:12005): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353063613663303863373936353264373962643866363363303566356432
type=BPF msg=audit(1781253097.118:12006): prog-id=395 op=LOAD
type=SYSCALL msg=audit(1781253097.118:12006): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1cc94940 a2=90 a3=9500000000 items=0 ppid=52274 pid=52275 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253097.118:12006): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653137366437353339306566643338653461653364363136353130353133
type=BPF msg=audit(1781253097.294:12007): prog-id=396 op=LOAD
type=SYSCALL msg=audit(1781253097.294:12007): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff747a04b0 a2=90 a3=9500000000 items=0 ppid=52330 pid=52331 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253097.294:12007): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613630383161633665653437333733663861303761613462663062343139
type=CRYPTO_KEY_USER msg=audit(1781253099.726:12008): pid=51594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=51594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=BPF msg=audit(1781253100.379:12009): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253100.571:12010): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253100.686:12011): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253100.974:12012): prog-id=397 op=LOAD
type=SYSCALL msg=audit(1781253100.974:12012): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb8379210 a2=90 a3=9500000000 items=0 ppid=53050 pid=53051 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253100.974:12012): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656566373836613230663263656235633562656666343864613734306665
type=BPF msg=audit(1781253101.155:12013): prog-id=398 op=LOAD
type=SYSCALL msg=audit(1781253101.155:12013): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd040378b0 a2=90 a3=9500000000 items=0 ppid=53116 pid=53117 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253101.155:12013): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396534393864383330616562393463613339386436636233326663616135
type=BPF msg=audit(1781253101.198:12014): prog-id=399 op=LOAD
type=SYSCALL msg=audit(1781253101.198:12014): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd539b37c0 a2=90 a3=9500000000 items=0 ppid=53120 pid=53121 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253101.198:12014): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653530346630303664613538343663323066343864306639666438383362
type=BPF msg=audit(1781253103.805:12015): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253103.855:12016): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253104.475:12017): prog-id=400 op=LOAD
type=SYSCALL msg=audit(1781253104.475:12017): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd91fd7370 a2=90 a3=9500000000 items=0 ppid=53603 pid=53604 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253104.475:12017): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663833306261653166636634383130616232393661616131623931393131
type=BPF msg=audit(1781253104.523:12018): prog-id=401 op=LOAD
type=SYSCALL msg=audit(1781253104.523:12018): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc82fc98d0 a2=90 a3=9500000000 items=0 ppid=53608 pid=53609 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253104.523:12018): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643966323932636464613133626263333166303964663439383239333638
type=BPF msg=audit(1781253104.858:12019): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253105.321:12020): prog-id=402 op=LOAD
type=SYSCALL msg=audit(1781253105.321:12020): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff94e303a0 a2=90 a3=9500000000 items=0 ppid=53784 pid=53785 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253105.321:12020): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636430386139323032623037326439636138313664663266306663643931
type=BPF msg=audit(1781253105.347:12021): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253105.784:12022): prog-id=403 op=LOAD
type=SYSCALL msg=audit(1781253105.784:12022): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe365e9520 a2=90 a3=9500000000 items=0 ppid=53893 pid=53894 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253105.784:12022): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663138613937376238333466623134396664643930383534383165663033
type=BPF msg=audit(1781253106.697:12023): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253106.973:12024): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253107.357:12025): prog-id=404 op=LOAD
type=SYSCALL msg=audit(1781253107.357:12025): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff0a72ed40 a2=90 a3=9500000000 items=0 ppid=54325 pid=54327 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253107.357:12025): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366264353738646439663639323734306437343639366464666361653866
type=BPF msg=audit(1781253107.484:12026): prog-id=405 op=LOAD
type=SYSCALL msg=audit(1781253107.484:12026): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc43c2e770 a2=90 a3=9500000000 items=0 ppid=54364 pid=54365 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253107.484:12026): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623766376530323661646462636630656538636239323130633732343435
type=BPF msg=audit(1781253108.216:12027): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253108.489:12028): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253108.927:12029): prog-id=406 op=LOAD
type=SYSCALL msg=audit(1781253108.927:12029): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe700fd4b0 a2=90 a3=9500000000 items=0 ppid=54660 pid=54661 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253108.927:12029): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343931376166393033363535646336313833363632383035346463656266
type=BPF msg=audit(1781253109.146:12030): prog-id=407 op=LOAD
type=SYSCALL msg=audit(1781253109.146:12030): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcfffbc2f0 a2=90 a3=9500000000 items=0 ppid=54711 pid=54712 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253109.146:12030): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303663333031383037613361636437373564383338626364633662376139
type=BPF msg=audit(1781253109.373:12031): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253109.792:12032): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253109.911:12033): prog-id=408 op=LOAD
type=SYSCALL msg=audit(1781253109.911:12033): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe31802e40 a2=90 a3=9500000000 items=0 ppid=55001 pid=55002 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253109.911:12033): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656132386231346531306339396634353232393032613839373165363136
type=BPF msg=audit(1781253110.446:12034): prog-id=409 op=LOAD
type=SYSCALL msg=audit(1781253110.446:12034): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd2cf65590 a2=90 a3=9500000000 items=0 ppid=55095 pid=55096 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253110.446:12034): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393231303332633363663338303136653664616566613663613266363164
type=BPF msg=audit(1781253111.046:12035): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253111.359:12036): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253111.641:12037): prog-id=410 op=LOAD
type=SYSCALL msg=audit(1781253111.641:12037): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe4695cd60 a2=90 a3=9500000000 items=0 ppid=55437 pid=55438 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253111.641:12037): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653132616533663163316534666366303532393861316439633831333861
type=BPF msg=audit(1781253111.847:12038): prog-id=411 op=LOAD
type=SYSCALL msg=audit(1781253111.847:12038): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd50dff060 a2=90 a3=9500000000 items=0 ppid=55492 pid=55493 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253111.847:12038): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323131343462366637313637633065626630346534323034336234646630
type=BPF msg=audit(1781253112.389:12039): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253113.321:12040): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253113.870:12041): prog-id=412 op=LOAD
type=SYSCALL msg=audit(1781253113.870:12041): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe87aa0ac0 a2=90 a3=9500000000 items=0 ppid=55999 pid=56000 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253113.870:12041): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643235623066376338346631353332306366643732616662333833316338
type=BPF msg=audit(1781253113.944:12042): prog-id=413 op=LOAD
type=SYSCALL msg=audit(1781253113.944:12042): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff81ab7190 a2=90 a3=9500000000 items=0 ppid=56020 pid=56021 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253113.944:12042): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306632663832653337376539323639326636353934323438346132346363
type=BPF msg=audit(1781253114.314:12043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253114.825:12044): prog-id=414 op=LOAD
type=SYSCALL msg=audit(1781253114.825:12044): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdf820edc0 a2=90 a3=9500000000 items=0 ppid=56154 pid=56155 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253114.825:12044): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306533616262376137643030656463353536353165376430643263666430
type=BPF msg=audit(1781253116.107:12045): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253116.686:12046): prog-id=415 op=LOAD
type=SYSCALL msg=audit(1781253116.686:12046): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe38741820 a2=90 a3=9500000000 items=0 ppid=56490 pid=56491 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253116.686:12046): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666638303934303031316634313138333530353039646530646630616263
type=BPF msg=audit(1781253116.976:12047): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253117.434:12048): prog-id=416 op=LOAD
type=SYSCALL msg=audit(1781253117.434:12048): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffca2861ff0 a2=90 a3=9500000000 items=0 ppid=56662 pid=56663 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253117.434:12048): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306532313230333066363463616334396563346436623661313063306630
type=BPF msg=audit(1781253118.354:12049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253119.021:12050): prog-id=417 op=LOAD
type=SYSCALL msg=audit(1781253119.021:12050): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd4ec68600 a2=90 a3=9500000000 items=0 ppid=57015 pid=57016 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253119.021:12050): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303261353964616163643734663937306636386432633430383236376462
type=BPF msg=audit(1781253119.481:12051): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253119.576:12052): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253119.636:12053): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253119.871:12054): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253120.297:12055): prog-id=418 op=LOAD
type=SYSCALL msg=audit(1781253120.297:12055): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc218235d0 a2=90 a3=9500000000 items=0 ppid=57444 pid=57445 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253120.297:12055): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393230666665613066393234323561313239613565616436626431366137
type=BPF msg=audit(1781253120.332:12056): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781253123.441:12057): pid=57652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=57652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253123.573:12058): pid=57651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=57652 suid=74 rport=51826 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253123.573:12059): pid=57651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=57652 suid=74 rport=51826 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253123.916:12060): prog-id=0 op=UNLOAD
type=USER_AUTH msg=audit(1781253124.219:12061): pid=57651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="huawei" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253126.692:12062): pid=57651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=57652 suid=74 rport=51826 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253126.693:12063): pid=57651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=57652 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253126.694:12064): pid=57651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=57651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253126.694:12065): pid=57651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253130.943:12066): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253131.267:12067): pid=51958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253131.267:12068): pid=51958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253131.272:12069): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253131.273:12070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253131.897:12071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253131.897:12072): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253131.974:12073): pid=57856 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253131.974:12074): pid=57856 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7867737966796A666C6967637961716C696C676168616A74627177686F6C63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253131.975:12075): pid=57856 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253131.981:12076): pid=57856 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253132.181:12077): pid=57856 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253132.181:12078): pid=57856 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253132.185:12079): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253132.185:12080): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253132.335:12081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253132.335:12082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253132.395:12083): pid=57872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253132.395:12084): pid=57872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7578776E64697A6B796A7677686E737A68686B71727A706D676F6672706F6C75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253132.396:12085): pid=57872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253132.399:12086): pid=57872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253132.592:12087): pid=57872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253132.593:12088): pid=57872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253132.598:12089): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253132.598:12090): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253132.918:12091): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253132.918:12092): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253132.975:12093): pid=57888 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253132.976:12094): pid=57888 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70737A68687862706B6C736667727664787377626C76666F7672776263757279203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253132.976:12095): pid=57888 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253132.978:12096): pid=57888 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253133.174:12097): pid=57888 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253133.174:12098): pid=57888 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253133.178:12099): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253133.178:12100): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253133.387:12101): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253133.387:12102): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253133.416:12103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253133.416:12104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253133.459:12105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253133.459:12106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253133.462:12107): pid=57908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=57908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781253133.493:12108): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253133.493:12109): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253133.537:12110): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253133.537:12111): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253133.586:12112): pid=57940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253133.586:12113): pid=57940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7270667777777167737A73656D7A677068616A717A6668756A62797A66756479203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253133.587:12114): pid=57940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253133.591:12115): pid=57940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781253133.722:12116): pid=57906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=57908 suid=74 rport=48366 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253133.722:12117): pid=57906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=57908 suid=74 rport=48366 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253133.736:12118): pid=57940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253133.736:12119): pid=57940 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253133.740:12120): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253133.740:12121): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253133.784:12122): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253133.785:12123): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253133.813:12124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253133.813:12125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253133.855:12126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253133.855:12127): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253133.886:12128): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253133.886:12129): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253133.933:12130): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253133.933:12131): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253133.990:12132): pid=57983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253133.991:12133): pid=57983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F65717879736A7962666F726A6475707068726C65767562736B63696A776A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253133.991:12134): pid=57983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253133.993:12135): pid=57983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253134.157:12136): pid=57983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253134.157:12137): pid=57983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253134.161:12138): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253134.161:12139): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253134.204:12140): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253134.205:12141): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253134.233:12142): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253134.233:12143): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253134.313:12144): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253134.313:12145): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253134.339:12146): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253134.339:12147): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253134.381:12148): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253134.381:12149): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253134.413:12150): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253134.413:12151): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253134.454:12152): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253134.455:12153): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253134.508:12154): pid=58045 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253134.509:12155): pid=58045 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727568736E6D6D796167716B736561796D646570687975766A7A75756C6E7278203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253134.509:12156): pid=58045 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253134.512:12157): pid=58045 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253134.681:12158): pid=58045 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253134.682:12159): pid=58045 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253134.685:12160): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253134.685:12161): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253134.729:12162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253134.730:12163): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253134.767:12164): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253134.767:12165): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253134.809:12166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253134.809:12167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253134.840:12168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253134.840:12169): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253134.881:12170): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253134.882:12171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253134.897:12172): pid=57906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253134.944:12173): pid=58089 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253134.945:12174): pid=58089 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A6B7865737364646176686968647379686A716E6C76716664697078766C6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253134.945:12175): pid=58089 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253134.948:12176): pid=58089 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253135.134:12177): pid=58089 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253135.134:12178): pid=58089 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253135.138:12179): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253135.138:12180): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253135.179:12181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253135.179:12182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253135.209:12183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253135.209:12184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253135.372:12185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253135.372:12186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253135.399:12187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253135.399:12188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253135.439:12189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253135.440:12190): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253135.470:12191): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253135.470:12192): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253135.512:12193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253135.512:12194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253135.575:12195): pid=58151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253135.575:12196): pid=58151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7379696579706F6C7272686A7573686C6E6F6969766A75766D6F75686F637561203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253135.576:12197): pid=58151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253135.579:12198): pid=58151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253135.760:12199): pid=58151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253135.760:12200): pid=58151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253135.764:12201): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253135.764:12202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253135.808:12203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253135.808:12204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253135.838:12205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253135.838:12206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253135.880:12207): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253135.880:12208): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253135.906:12209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253135.906:12210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253135.948:12211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253135.948:12212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253136.004:12213): pid=58194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253136.004:12214): pid=58194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C69687569786B706971696F7A7770737568776564747775767366766B746578203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253136.005:12215): pid=58194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253136.007:12216): pid=58194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253136.190:12217): pid=58194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253136.191:12218): pid=58194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253136.194:12219): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253136.194:12220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253136.235:12221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253136.236:12222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253136.266:12223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253136.266:12224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253136.403:12225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253136.403:12226): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253136.434:12227): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253136.434:12228): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253136.476:12229): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253136.477:12230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253136.516:12231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253136.516:12232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253136.557:12233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253136.557:12234): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253136.619:12235): pid=58256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253136.619:12236): pid=58256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6C6E78707464647265646273797A62756E6172716F796E61656D70696D726C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253136.619:12237): pid=58256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253136.621:12238): pid=58256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253136.794:12239): pid=58256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253136.795:12240): pid=58256 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253136.799:12241): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253136.799:12242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253136.844:12243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253136.845:12244): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253136.879:12245): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253136.879:12246): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253136.921:12247): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253136.921:12248): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253136.954:12249): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253136.954:12250): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253136.996:12251): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253136.996:12252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253137.060:12253): pid=58299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253137.060:12254): pid=58299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6277636F77696265646C696863796D726D657A676D7968726D656676627572203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253137.061:12255): pid=58299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253137.063:12256): pid=58299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253137.244:12257): pid=58299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253137.244:12258): pid=58299 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253137.249:12259): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253137.249:12260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253137.291:12261): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253137.291:12262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253137.328:12263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253137.328:12264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253137.465:12265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253137.465:12266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253137.538:12267): pid=58329 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253137.539:12268): pid=58329 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7671736A676D74766C726778657370616D6667797A6B6270717570766E696166203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253137.540:12269): pid=58329 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253137.542:12270): pid=58329 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253138.057:12271): prog-id=419 op=LOAD
type=BPF msg=audit(1781253138.057:12272): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.057:12273): prog-id=420 op=LOAD
type=BPF msg=audit(1781253138.057:12274): prog-id=421 op=LOAD
type=BPF msg=audit(1781253138.057:12275): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.057:12276): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.060:12277): prog-id=422 op=LOAD
type=BPF msg=audit(1781253138.060:12278): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.060:12279): prog-id=423 op=LOAD
type=BPF msg=audit(1781253138.060:12280): prog-id=424 op=LOAD
type=BPF msg=audit(1781253138.060:12281): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.060:12282): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.062:12283): prog-id=425 op=LOAD
type=BPF msg=audit(1781253138.062:12284): prog-id=426 op=LOAD
type=BPF msg=audit(1781253138.062:12285): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.062:12286): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.064:12287): prog-id=427 op=LOAD
type=BPF msg=audit(1781253138.064:12288): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.064:12289): prog-id=428 op=LOAD
type=BPF msg=audit(1781253138.064:12290): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.305:12291): prog-id=429 op=LOAD
type=BPF msg=audit(1781253138.305:12292): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.305:12293): prog-id=430 op=LOAD
type=BPF msg=audit(1781253138.305:12294): prog-id=431 op=LOAD
type=BPF msg=audit(1781253138.305:12295): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.305:12296): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.308:12297): prog-id=432 op=LOAD
type=BPF msg=audit(1781253138.308:12298): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.309:12299): prog-id=433 op=LOAD
type=BPF msg=audit(1781253138.309:12300): prog-id=434 op=LOAD
type=BPF msg=audit(1781253138.309:12301): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.309:12302): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.310:12303): prog-id=435 op=LOAD
type=BPF msg=audit(1781253138.310:12304): prog-id=436 op=LOAD
type=BPF msg=audit(1781253138.310:12305): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.310:12306): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.312:12307): prog-id=437 op=LOAD
type=BPF msg=audit(1781253138.312:12308): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253138.312:12309): prog-id=438 op=LOAD
type=BPF msg=audit(1781253138.312:12310): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253138.334:12311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo-container-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253138.366:12312): pid=58329 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253138.366:12313): pid=58329 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253138.371:12314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253138.371:12315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253138.511:12316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253138.511:12317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253138.543:12318): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253138.543:12319): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253138.584:12320): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253138.584:12321): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253138.620:12322): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253138.621:12323): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253138.662:12324): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253138.662:12325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253138.729:12326): pid=58452 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253138.729:12327): pid=58452 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D766B7365717571767A7078676C62736D747777646A6379636E7A6A6A6469203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253138.730:12328): pid=58452 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253138.734:12329): pid=58452 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253138.785:12330): pid=57906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=57908 suid=74 rport=48366 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253138.785:12331): pid=57906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=57908 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253138.786:12332): pid=57906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=57906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253138.787:12333): pid=57906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253138.911:12334): pid=58452 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253138.911:12335): pid=58452 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253138.915:12336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253138.915:12337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253138.959:12338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253138.959:12339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253138.992:12340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253138.992:12341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253139.034:12342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253139.034:12343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253139.065:12344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253139.065:12345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253139.107:12346): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253139.107:12347): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253139.164:12348): pid=58495 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253139.165:12349): pid=58495 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D64786E76626E786861736362636265616C7A6173626274756966656D6761203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253139.165:12350): pid=58495 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253139.167:12351): pid=58495 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253139.350:12352): pid=58495 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253139.351:12353): pid=58495 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253139.355:12354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253139.355:12355): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253139.397:12356): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253139.397:12357): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253139.428:12358): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253139.428:12359): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253139.543:12360): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253139.543:12361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253139.572:12362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253139.572:12363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253139.614:12364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253139.614:12365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253139.646:12366): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253139.646:12367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253139.688:12368): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253139.688:12369): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253139.751:12370): pid=58557 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253139.752:12371): pid=58557 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6365717671686576617368716376786E716D6B766C6868776B63686661796365203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253139.752:12372): pid=58557 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253139.756:12373): pid=58557 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253139.942:12374): pid=58557 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253139.942:12375): pid=58557 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253139.945:12376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253139.946:12377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253139.986:12378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253139.987:12379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253140.022:12380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253140.022:12381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253140.064:12382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253140.064:12383): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253140.095:12384): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253140.095:12385): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253140.141:12386): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253140.141:12387): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253140.184:12388): pid=58600 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253140.184:12389): pid=58600 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A6C746B736462657272686661756B73626A777A70646F79716C6265637172203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253140.185:12390): pid=58600 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253140.188:12391): pid=58600 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253140.357:12392): pid=58600 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253140.357:12393): pid=58600 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253140.361:12394): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253140.361:12395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253140.402:12396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253140.403:12397): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253140.432:12398): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253140.432:12399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253140.560:12400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253140.560:12401): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253140.624:12402): pid=58630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253140.624:12403): pid=58630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C657763756176757A696A6B6364796470737675647672687573646E75656A66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253140.625:12404): pid=58630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253140.628:12405): pid=58630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253141.128:12406): prog-id=439 op=LOAD
type=BPF msg=audit(1781253141.128:12407): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.128:12408): prog-id=440 op=LOAD
type=BPF msg=audit(1781253141.128:12409): prog-id=441 op=LOAD
type=BPF msg=audit(1781253141.128:12410): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.128:12411): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.132:12412): prog-id=442 op=LOAD
type=BPF msg=audit(1781253141.132:12413): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.132:12414): prog-id=443 op=LOAD
type=BPF msg=audit(1781253141.132:12415): prog-id=444 op=LOAD
type=BPF msg=audit(1781253141.132:12416): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.132:12417): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.133:12418): prog-id=445 op=LOAD
type=BPF msg=audit(1781253141.133:12419): prog-id=446 op=LOAD
type=BPF msg=audit(1781253141.133:12420): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.133:12421): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.135:12422): prog-id=447 op=LOAD
type=BPF msg=audit(1781253141.135:12423): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.136:12424): prog-id=448 op=LOAD
type=BPF msg=audit(1781253141.136:12425): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.376:12426): prog-id=449 op=LOAD
type=BPF msg=audit(1781253141.376:12427): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.376:12428): prog-id=450 op=LOAD
type=BPF msg=audit(1781253141.376:12429): prog-id=451 op=LOAD
type=BPF msg=audit(1781253141.376:12430): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.376:12431): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.379:12432): prog-id=452 op=LOAD
type=BPF msg=audit(1781253141.379:12433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.379:12434): prog-id=453 op=LOAD
type=BPF msg=audit(1781253141.379:12435): prog-id=454 op=LOAD
type=BPF msg=audit(1781253141.379:12436): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.379:12437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.381:12438): prog-id=455 op=LOAD
type=BPF msg=audit(1781253141.381:12439): prog-id=456 op=LOAD
type=BPF msg=audit(1781253141.381:12440): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.381:12441): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.382:12442): prog-id=457 op=LOAD
type=BPF msg=audit(1781253141.382:12443): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253141.383:12444): prog-id=458 op=LOAD
type=BPF msg=audit(1781253141.383:12445): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253141.417:12446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253141.417:12447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253141.453:12448): pid=58630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253141.454:12449): pid=58630 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253141.459:12450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253141.459:12451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253141.713:12452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253141.713:12453): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253141.780:12454): pid=58722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253141.780:12455): pid=58722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7472636775676F6F646E70786763737778706B6D7871726C6772726A6D79646E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253141.780:12456): pid=58722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253141.784:12457): pid=58722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253141.963:12458): pid=58722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253141.963:12459): pid=58722 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253141.968:12460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253141.968:12461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253142.246:12462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253142.246:12463): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253142.309:12464): pid=58738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253142.309:12465): pid=58738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6772696F787374777A6D677261696A626D70636F73657769696D696271656D75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253142.310:12466): pid=58738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253142.314:12467): pid=58738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253142.758:12468): pid=58738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253142.758:12469): pid=58738 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253142.762:12470): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253142.762:12471): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253143.396:12472): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253143.396:12473): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253143.439:12474): pid=58780 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253143.440:12475): pid=58780 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E736E65787874667769736A6F786279766E706A676764767568616B67646A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253143.440:12476): pid=58780 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253143.442:12477): pid=58780 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253143.992:12478): prog-id=459 op=LOAD
type=SYSCALL msg=audit(1781253143.992:12478): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffa958cc10 a2=90 a3=9500000000 items=0 ppid=59018 pid=59019 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253143.992:12478): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656331613765646530303735636538656263393539616130633962363965
type=BPF msg=audit(1781253143.998:12479): prog-id=460 op=LOAD
type=SYSCALL msg=audit(1781253143.998:12479): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc44ba9610 a2=90 a3=9500000000 items=0 ppid=59021 pid=59023 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253143.998:12479): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393735333165393437623737666238386334306366393663616561336231
type=BPF msg=audit(1781253144.043:12480): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253144.044:12481): prog-id=461 op=LOAD
type=SYSCALL msg=audit(1781253144.044:12481): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc4ff6a440 a2=90 a3=9500000000 items=0 ppid=59030 pid=59031 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253144.044:12481): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613738383439616632326339373763303463393463653134373737613633
type=BPF msg=audit(1781253144.063:12482): prog-id=462 op=LOAD
type=SYSCALL msg=audit(1781253144.063:12482): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff2636e780 a2=90 a3=9500000000 items=0 ppid=59050 pid=59051 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253144.063:12482): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333761666530636537333936646135353864353563653238343661303733
type=BPF msg=audit(1781253144.092:12483): prog-id=463 op=LOAD
type=SYSCALL msg=audit(1781253144.092:12483): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff81b63620 a2=90 a3=9500000000 items=0 ppid=59054 pid=59055 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253144.092:12483): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393061633963366539626330373564353436363938333939393363396162
type=SERVICE_START msg=audit(1781253144.139:12484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253144.181:12485): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253144.393:12486): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253144.428:12487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253145.084:12488): prog-id=464 op=LOAD
type=SYSCALL msg=audit(1781253145.084:12488): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc0f7dfc70 a2=90 a3=9500000000 items=0 ppid=59366 pid=59367 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253145.084:12488): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623834373333633264626538373263653063373031363865383162313136
type=BPF msg=audit(1781253145.132:12489): prog-id=465 op=LOAD
type=SYSCALL msg=audit(1781253145.132:12489): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc88360610 a2=90 a3=9500000000 items=0 ppid=59371 pid=59372 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253145.132:12489): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636261383437323535633030343535303765653563646336326664633335
type=SERVICE_START msg=audit(1781253145.194:12490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253145.609:12491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253151.493:12492): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253151.731:12493): pid=58780 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253151.732:12494): pid=58780 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253151.737:12495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253151.737:12496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253151.895:12497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253151.895:12498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253151.943:12499): pid=60228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253151.943:12500): pid=60228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7178727573757770786F666176666664746D6A61776C756965677063786D7170203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253151.944:12501): pid=60228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253151.948:12502): pid=60228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253152.214:12503): pid=60228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253152.214:12504): pid=60228 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253152.219:12505): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253152.219:12506): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253152.264:12507): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253152.264:12508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253152.321:12509): pid=60244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253152.321:12510): pid=60244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C737573776875686869616E796A737A6B74726676777161637072696F6569203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253152.322:12511): pid=60244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253152.324:12512): pid=60244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253152.499:12513): pid=60244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253152.500:12514): pid=60244 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253152.503:12515): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253152.503:12516): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253152.544:12517): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253152.544:12518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253152.589:12519): pid=60260 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253152.589:12520): pid=60260 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A76656B63746677776C7A6C6A626F6861737071746E757071686C7A6C796470203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253152.589:12521): pid=60260 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253152.591:12522): pid=60260 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253152.739:12523): pid=60260 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253152.739:12524): pid=60260 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253152.743:12525): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253152.743:12526): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253152.781:12527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253152.781:12528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253152.842:12529): pid=60276 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253152.842:12530): pid=60276 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A676B78687475667A6E7A7666796B6E6C6264666478676E61636F69786B76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253152.843:12531): pid=60276 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253152.846:12532): pid=60276 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253153.022:12533): pid=60276 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253153.022:12534): pid=60276 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253153.026:12535): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253153.026:12536): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253153.066:12537): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253153.066:12538): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253153.131:12539): pid=60292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253153.131:12540): pid=60292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66726E6A676A646B7879726D737670666E78757473686C676E646E746F657A7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253153.132:12541): pid=60292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253153.135:12542): pid=60292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253153.282:12543): pid=60292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253153.282:12544): pid=60292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253153.286:12545): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253153.286:12546): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253153.327:12547): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253153.327:12548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253153.387:12549): pid=60308 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253153.388:12550): pid=60308 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72697A726B6B66676D6B78716C6B61726F6B7373627064696C637A7771756271203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253153.388:12551): pid=60308 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253153.390:12552): pid=60308 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253153.560:12553): pid=60308 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253153.561:12554): pid=60308 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253153.565:12555): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253153.565:12556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253153.604:12557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253153.604:12558): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253153.628:12559): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253153.628:12560): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253153.670:12561): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253153.670:12562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253153.709:12563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253153.709:12564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253153.929:12565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253153.929:12566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253153.967:12567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253153.968:12568): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253154.014:12569): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253154.014:12570): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253154.076:12571): pid=60369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253154.078:12572): pid=60369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6364646968736E72696A76747A70766B65696467726A77757064637463797163203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253154.078:12573): pid=60369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253154.080:12574): pid=60369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253154.262:12575): pid=60369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253154.262:12576): pid=60369 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253154.266:12577): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253154.266:12578): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253154.474:12579): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253154.474:12580): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253154.509:12581): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253154.509:12582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253154.551:12583): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253154.552:12584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253154.613:12585): pid=60398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253154.614:12586): pid=60398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F667376646A776968627675766B677367696163617870627868696F7070716F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253154.614:12587): pid=60398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253154.617:12588): pid=60398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253154.793:12589): pid=60398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253154.793:12590): pid=60398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253154.797:12591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253154.797:12592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253155.005:12593): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253155.005:12594): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253155.044:12595): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253155.044:12596): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253155.086:12597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253155.086:12598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253155.153:12599): pid=60427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253155.153:12600): pid=60427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C736F7A666D6B6A6979696774676A616C616F617874716F677272756C726F62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253155.153:12601): pid=60427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253155.156:12602): pid=60427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253155.370:12603): pid=60427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253155.370:12604): pid=60427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253155.373:12605): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253155.374:12606): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253155.418:12607): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253155.418:12608): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253155.480:12609): pid=60443 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253155.480:12610): pid=60443 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64656973687A756F7976707A6D75786865667277786B677A7277736A656A7570203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253155.481:12611): pid=60443 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253155.484:12612): pid=60443 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253155.987:12613): prog-id=466 op=LOAD
type=BPF msg=audit(1781253155.987:12614): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.987:12615): prog-id=467 op=LOAD
type=BPF msg=audit(1781253155.987:12616): prog-id=468 op=LOAD
type=BPF msg=audit(1781253155.987:12617): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.987:12618): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.991:12619): prog-id=469 op=LOAD
type=BPF msg=audit(1781253155.991:12620): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.991:12621): prog-id=470 op=LOAD
type=BPF msg=audit(1781253155.991:12622): prog-id=471 op=LOAD
type=BPF msg=audit(1781253155.991:12623): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.991:12624): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.993:12625): prog-id=472 op=LOAD
type=BPF msg=audit(1781253155.993:12626): prog-id=473 op=LOAD
type=BPF msg=audit(1781253155.993:12627): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.993:12628): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.995:12629): prog-id=474 op=LOAD
type=BPF msg=audit(1781253155.995:12630): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253155.996:12631): prog-id=475 op=LOAD
type=BPF msg=audit(1781253155.996:12632): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253156.024:12633): pid=60443 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253156.024:12634): pid=60443 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253156.030:12635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253156.030:12636): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253156.370:12637): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253156.370:12638): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253156.432:12639): pid=60494 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253156.432:12640): pid=60494 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636170696F6E7977707071766C6F68666C676F6762756A6D6465686A766A6A6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253156.433:12641): pid=60494 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253156.436:12642): pid=60494 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253156.996:12643): prog-id=476 op=LOAD
type=BPF msg=audit(1781253156.996:12644): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253156.996:12645): prog-id=477 op=LOAD
type=BPF msg=audit(1781253156.996:12646): prog-id=478 op=LOAD
type=BPF msg=audit(1781253156.996:12647): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253156.997:12648): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253157.001:12649): prog-id=479 op=LOAD
type=BPF msg=audit(1781253157.001:12650): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253157.001:12651): prog-id=480 op=LOAD
type=BPF msg=audit(1781253157.001:12652): prog-id=481 op=LOAD
type=BPF msg=audit(1781253157.001:12653): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253157.001:12654): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253157.003:12655): prog-id=482 op=LOAD
type=BPF msg=audit(1781253157.003:12656): prog-id=483 op=LOAD
type=BPF msg=audit(1781253157.003:12657): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253157.003:12658): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253157.004:12659): prog-id=484 op=LOAD
type=BPF msg=audit(1781253157.004:12660): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253157.005:12661): prog-id=485 op=LOAD
type=BPF msg=audit(1781253157.005:12662): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253157.087:12663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_memcached comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253157.104:12664): pid=60494 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253157.104:12665): pid=60494 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253157.107:12666): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253157.107:12667): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253157.703:12668): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253157.703:12669): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253157.758:12670): pid=60561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253157.758:12671): pid=60561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D6A6D737076727A626B6A776A7661796A727577627066796B6C726B716762203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253157.760:12672): pid=60561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253157.763:12673): pid=60561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253158.334:12674): prog-id=486 op=LOAD
type=BPF msg=audit(1781253158.334:12675): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.334:12676): prog-id=487 op=LOAD
type=BPF msg=audit(1781253158.334:12677): prog-id=488 op=LOAD
type=BPF msg=audit(1781253158.335:12678): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.335:12679): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.338:12680): prog-id=489 op=LOAD
type=BPF msg=audit(1781253158.338:12681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.338:12682): prog-id=490 op=LOAD
type=BPF msg=audit(1781253158.338:12683): prog-id=491 op=LOAD
type=BPF msg=audit(1781253158.338:12684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.338:12685): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.340:12686): prog-id=492 op=LOAD
type=BPF msg=audit(1781253158.340:12687): prog-id=493 op=LOAD
type=BPF msg=audit(1781253158.340:12688): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.340:12689): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.341:12690): prog-id=494 op=LOAD
type=BPF msg=audit(1781253158.342:12691): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253158.342:12692): prog-id=495 op=LOAD
type=BPF msg=audit(1781253158.342:12693): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253158.447:12694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_metrics_qdr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253158.469:12695): pid=60561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253158.470:12696): pid=60561 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253158.474:12697): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253158.474:12698): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253158.875:12699): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253158.875:12700): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253158.939:12701): pid=60627 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253158.939:12702): pid=60627 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A77726F6473617763747862666D6D686A71676F65656A7273676D6F6A6D70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253158.940:12703): pid=60627 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253158.943:12704): pid=60627 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253159.492:12705): prog-id=496 op=LOAD
type=BPF msg=audit(1781253159.492:12706): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.492:12707): prog-id=497 op=LOAD
type=BPF msg=audit(1781253159.492:12708): prog-id=498 op=LOAD
type=BPF msg=audit(1781253159.492:12709): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.492:12710): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.496:12711): prog-id=499 op=LOAD
type=BPF msg=audit(1781253159.496:12712): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.497:12713): prog-id=500 op=LOAD
type=BPF msg=audit(1781253159.497:12714): prog-id=501 op=LOAD
type=BPF msg=audit(1781253159.497:12715): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.497:12716): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.499:12717): prog-id=502 op=LOAD
type=BPF msg=audit(1781253159.499:12718): prog-id=503 op=LOAD
type=BPF msg=audit(1781253159.499:12719): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.499:12720): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.500:12721): prog-id=504 op=LOAD
type=BPF msg=audit(1781253159.501:12722): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253159.501:12723): prog-id=505 op=LOAD
type=BPF msg=audit(1781253159.501:12724): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253159.580:12725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_redis_tls_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253159.601:12726): pid=60627 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253159.601:12727): pid=60627 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253159.604:12728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253159.604:12729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253159.666:12730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253159.666:12731): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253159.699:12732): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253159.699:12733): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253159.912:12734): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253159.912:12735): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253159.973:12736): pid=60708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253159.974:12737): pid=60708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7263746665747A6B746F676A6C77736E676C7776727A777A6C70776B72687764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253159.975:12738): pid=60708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253159.979:12739): pid=60708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253160.156:12740): pid=60708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253160.156:12741): pid=60708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253160.160:12742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253160.160:12743): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253160.577:12744): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253160.577:12745): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253160.603:12746): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253160.603:12747): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253160.643:12748): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253160.643:12749): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253160.677:12750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253160.678:12751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253160.719:12752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253160.719:12753): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253160.761:12754): pid=60756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253160.761:12755): pid=60756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A6C6F63647A6B6576637278717363676D75756E6563777378686C65666770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253160.762:12756): pid=60756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253160.763:12757): pid=60756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253160.893:12758): pid=60756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253160.893:12759): pid=60756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253160.896:12760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253160.896:12761): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253160.936:12762): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253160.936:12763): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253160.962:12764): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253160.962:12765): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253161.004:12766): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253161.004:12767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253161.028:12768): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253161.028:12769): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253161.069:12770): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253161.069:12771): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253161.108:12772): pid=60799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253161.109:12773): pid=60799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B716876626C616E79656661666B67696C6F786D637669616B706F726D686C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253161.110:12774): pid=60799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253161.113:12775): pid=60799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253161.285:12776): pid=60799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253161.286:12777): pid=60799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253161.289:12778): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253161.289:12779): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253161.330:12780): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253161.330:12781): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253161.363:12782): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253161.363:12783): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253161.507:12784): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253161.507:12785): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253161.568:12786): pid=60829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253161.569:12787): pid=60829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627172716670766E6B656E75746874716F69727A7062716870766F61716E776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253161.569:12788): pid=60829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253161.571:12789): pid=60829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253161.765:12790): pid=60829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253161.765:12791): pid=60829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253161.770:12792): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253161.770:12793): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253162.102:12794): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253162.102:12795): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253162.172:12796): pid=60845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253162.172:12797): pid=60845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B7473686762636B7970787676676F70637068696A6575646A767067727779203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253162.173:12798): pid=60845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253162.175:12799): pid=60845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253162.337:12800): pid=60845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253162.337:12801): pid=60845 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253162.341:12802): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253162.341:12803): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253162.490:12804): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253162.490:12805): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253162.541:12806): pid=60861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253162.541:12807): pid=60861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7177646F6775746C767374766D6E6B6D6D616E716B65777373796C6C67777674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253162.543:12808): pid=60861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253162.546:12809): pid=60861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253162.715:12810): pid=60861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253162.716:12811): pid=60861 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253162.721:12812): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253162.721:12813): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253164.454:12814): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253164.454:12815): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253164.476:12816): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253164.476:12817): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253164.517:12818): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253164.517:12819): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253164.547:12820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253164.547:12821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253164.588:12822): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253164.588:12823): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253164.640:12824): pid=60909 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253164.640:12825): pid=60909 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7369646A617767616F6B6A6E6E736864796561646D6A6D62697471617371756D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253164.640:12826): pid=60909 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253164.641:12827): pid=60909 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253164.826:12828): pid=60909 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253164.826:12829): pid=60909 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253164.831:12830): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253164.831:12831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253164.878:12832): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253164.878:12833): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253164.909:12834): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253164.909:12835): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253164.950:12836): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253164.950:12837): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253164.977:12838): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253164.978:12839): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253165.022:12840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253165.022:12841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253165.089:12842): pid=60954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253165.089:12843): pid=60954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757466696B657678627879786F7373726D656171727974726C75786575656E66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253165.090:12844): pid=60954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253165.092:12845): pid=60954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253165.276:12846): pid=60954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253165.276:12847): pid=60954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253165.280:12848): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253165.280:12849): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253165.321:12850): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253165.321:12851): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253165.352:12852): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253165.352:12853): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253165.895:12854): pid=60972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=60972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253165.926:12855): pid=60971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=60972 suid=74 rport=52942 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253165.926:12856): pid=60971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=60972 suid=74 rport=52942 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253166.208:12857): pid=60971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253166.212:12858): pid=60975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=60975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253166.278:12859): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253166.278:12860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253166.335:12861): pid=60989 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253166.335:12862): pid=60989 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E777A7073706D77706D797375726266747A76676C6A6B63796C7663727274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253166.335:12863): pid=60989 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253166.338:12864): pid=60989 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253167.003:12865): pid=60989 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253167.003:12866): pid=60989 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253167.006:12867): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253167.006:12868): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253167.222:12869): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253167.222:12870): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781253167.278:12871): pid=60974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=60975 suid=74 rport=46952 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253167.278:12872): pid=60974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=60975 suid=74 rport=46952 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1781253167.283:12873): pid=61007 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253167.283:12874): pid=61007 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787175627A777063696F68696E6265796A616F66677A65666968787579786271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253167.284:12875): pid=61007 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253167.286:12876): pid=61007 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253167.955:12877): pid=60974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gemini" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253169.872:12878): pid=60971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=60972 suid=74 rport=52942 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253169.873:12879): pid=60971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=60972 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253169.874:12880): pid=60971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=60971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253169.874:12881): pid=60971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253171.792:12882): pid=60974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=60975 suid=74 rport=46952 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253171.792:12883): pid=60974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=60975 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253171.793:12884): pid=60974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=60974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253171.794:12885): pid=60974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253174.823:12886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253175.097:12887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253175.272:12888): pid=61007 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253175.272:12889): pid=61007 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253175.275:12890): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253175.276:12891): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253175.456:12892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253175.456:12893): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253175.524:12894): pid=61170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253175.524:12895): pid=61170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A63676B627A646876617A6568726970766D676E6268776578757A6F7567796D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253175.525:12896): pid=61170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253175.528:12897): pid=61170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253175.724:12898): pid=61170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253175.724:12899): pid=61170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253175.729:12900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253175.729:12901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253175.878:12902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253175.878:12903): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253175.928:12904): pid=61188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253175.928:12905): pid=61188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796568657179657976756C6B797A776974636A79736D756C716C78726F736A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253175.929:12906): pid=61188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253175.931:12907): pid=61188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253175.951:12908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253176.252:12909): pid=61188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253176.252:12910): pid=61188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253176.256:12911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253176.256:12912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253176.282:12913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253176.411:12914): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253176.411:12915): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253176.458:12916): pid=61237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253176.459:12917): pid=61237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76656C72777071677375726163756278777A66666A6E756F61766C6C6F6A6161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253176.459:12918): pid=61237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253176.461:12919): pid=61237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253176.607:12920): pid=61237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253176.608:12921): pid=61237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253176.612:12922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253176.612:12923): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253177.224:12924): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253177.224:12925): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253177.270:12926): pid=61253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253177.270:12927): pid=61253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706F7869706D64726678767A6B616D6E656C6A6E706C6D766162696C697266203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253177.271:12928): pid=61253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253177.273:12929): pid=61253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253177.950:12930): pid=61253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253177.951:12931): pid=61253 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253177.953:12932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253177.953:12933): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253178.099:12934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253178.099:12935): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253178.157:12936): pid=61271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253178.158:12937): pid=61271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7373717167707466686466766B666E75626567796E6462796D6D73766D696370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253178.158:12938): pid=61271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253178.160:12939): pid=61271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253184.331:12940): pid=61399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=61399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253184.424:12941): pid=61398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=61399 suid=74 rport=32820 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253184.424:12942): pid=61398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=61399 suid=74 rport=32820 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253184.914:12943): pid=61398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="st" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253185.552:12944): pid=61271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253185.553:12945): pid=61271 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253185.556:12946): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253185.556:12947): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253185.745:12948): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253185.745:12949): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253185.809:12950): pid=61418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253185.810:12951): pid=61418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B7566726B7974736E62717664626D6B75796E6E656965687568726E6D6B7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253185.810:12952): pid=61418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253185.815:12953): pid=61418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253186.002:12954): pid=61418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253186.002:12955): pid=61418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253186.005:12956): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253186.006:12957): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253186.213:12958): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253186.214:12959): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253186.282:12960): pid=61436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253186.282:12961): pid=61436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F66746E6E6E7170766F6A667879796265757A776C747A787A71716F6468706F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253186.283:12962): pid=61436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253186.285:12963): pid=61436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253186.630:12964): pid=61436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253186.630:12965): pid=61436 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253186.633:12966): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253186.633:12967): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253186.745:12968): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253186.745:12969): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253186.793:12970): pid=61456 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253186.793:12971): pid=61456 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6679776367706D6B76656A76677867677174766D637A6972706C686178686A79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253186.793:12972): pid=61456 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253186.795:12973): pid=61456 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253186.946:12974): pid=61456 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253186.946:12975): pid=61456 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253186.949:12976): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253186.949:12977): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253187.040:12978): pid=61398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=61399 suid=74 rport=32820 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253187.041:12979): pid=61398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=61399 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253187.041:12980): pid=61398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=61398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253187.041:12981): pid=61398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253187.481:12982): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253187.482:12983): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253187.510:12984): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253187.510:12985): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253187.552:12986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253187.552:12987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253187.587:12988): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253187.587:12989): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253187.628:12990): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253187.628:12991): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253187.691:12992): pid=61504 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253187.692:12993): pid=61504 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6D69676878796A63686A7779656262757A7A6A69786670676962796B787A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253187.692:12994): pid=61504 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253187.695:12995): pid=61504 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253187.882:12996): pid=61504 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253187.882:12997): pid=61504 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253187.886:12998): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253187.886:12999): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253187.932:13000): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253187.932:13001): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253187.978:13002): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253187.978:13003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253188.020:13004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253188.020:13005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253188.053:13006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253188.053:13007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253188.096:13008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253188.096:13009): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253188.149:13010): pid=61547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253188.149:13011): pid=61547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61747A766F626B696C636869687A6472666F6C6876766D66776E71786E736C67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253188.150:13012): pid=61547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253188.151:13013): pid=61547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253188.324:13014): pid=61547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253188.325:13015): pid=61547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253188.328:13016): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253188.328:13017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253188.361:13018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253188.361:13019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253188.390:13020): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253188.390:13021): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253188.497:13022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253188.497:13023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253188.554:13024): pid=61577 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253188.554:13025): pid=61577 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70716A646673686E736F6973686D6E76736661797776736D69636D64746D6467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253188.555:13026): pid=61577 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253188.557:13027): pid=61577 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253188.763:13028): pid=61577 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253188.763:13029): pid=61577 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253188.768:13030): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253188.768:13031): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253189.079:13032): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253189.079:13033): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253189.144:13034): pid=61596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253189.144:13035): pid=61596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776269727377787068786978707261626B68687172646D7161696173676A6E66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253189.145:13036): pid=61596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253189.148:13037): pid=61596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253189.832:13038): pid=61596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253189.833:13039): pid=61596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253189.835:13040): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253189.835:13041): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253189.989:13042): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253189.989:13043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253190.041:13044): pid=61614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253190.042:13045): pid=61614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79636664786E7371696677617663786E706361786D79676E667073776A74716C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253190.042:13046): pid=61614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253190.044:13047): pid=61614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253197.732:13048): pid=61614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253197.732:13049): pid=61614 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253197.736:13050): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253197.736:13051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253197.871:13052): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253197.871:13053): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253197.933:13054): pid=61803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253197.933:13055): pid=61803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687775766D706672726C71746F68616963696872786F6A746E7668767864766E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253197.933:13056): pid=61803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253197.936:13057): pid=61803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253198.124:13058): pid=61803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253198.124:13059): pid=61803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253198.128:13060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253198.128:13061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253198.380:13062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253198.380:13063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253198.434:13064): pid=61821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253198.434:13065): pid=61821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E73716C756171686777696A717A64726670676C666176646279727A68716877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253198.435:13066): pid=61821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253198.436:13067): pid=61821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253198.752:13068): pid=61821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253198.752:13069): pid=61821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253198.756:13070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253198.756:13071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253198.970:13072): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253198.970:13073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253199.020:13074): pid=61841 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253199.020:13075): pid=61841 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786463726E69776466676C786E6170636D6778666468646C6E617977686D6E6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253199.020:13076): pid=61841 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253199.022:13077): pid=61841 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253199.184:13078): pid=61841 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253199.184:13079): pid=61841 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253199.188:13080): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253199.188:13081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253199.846:13082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253199.846:13083): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253199.904:13084): pid=61858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253199.905:13085): pid=61858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6161657764636174686A6875677072677673716F6B6F656C6F716B6C646D6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253199.906:13086): pid=61858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253199.908:13087): pid=61858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253200.538:13088): pid=61858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253200.538:13089): pid=61858 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253200.542:13090): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253200.542:13091): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253200.680:13092): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253200.680:13093): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253200.736:13094): pid=61876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253200.736:13095): pid=61876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75746A63796274716D78636F6371636D6C656D71726B6A6577677A65666B6267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253200.737:13096): pid=61876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253200.739:13097): pid=61876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253205.174:13098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253205.298:13099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253207.172:13100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253207.486:13101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253207.871:13102): pid=61876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253207.871:13103): pid=61876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253207.877:13104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253207.877:13105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253208.037:13106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253208.037:13107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253208.109:13108): pid=62112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253208.110:13109): pid=62112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7965667A65667A7679736366656777727176657570726366626166696C686F6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253208.111:13110): pid=62112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253208.116:13111): pid=62112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253208.305:13112): pid=62112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253208.305:13113): pid=62112 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253208.309:13114): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253208.309:13115): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253208.494:13116): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253208.494:13117): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253208.562:13118): pid=62131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253208.562:13119): pid=62131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74786E6F69636B6F6A786E756F6F766B656A6D697A766779626E637862646363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253208.563:13120): pid=62131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253208.566:13121): pid=62131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253208.927:13122): pid=62131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253208.927:13123): pid=62131 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253208.931:13124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253208.931:13125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253209.068:13126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253209.068:13127): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253209.129:13128): pid=62151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253209.129:13129): pid=62151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7669657A7365716F77796573687372646E6B7961646E6F6D6A72726A67707564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253209.130:13130): pid=62151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253209.133:13131): pid=62151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253209.149:13132): pid=62155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=62155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253209.281:13133): pid=62153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=62155 suid=74 rport=55204 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253209.281:13134): pid=62153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=62155 suid=74 rport=55204 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253209.298:13135): pid=62151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253209.298:13136): pid=62151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253209.302:13137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253209.302:13138): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253209.846:13139): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253209.846:13140): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253209.915:13141): pid=62169 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253209.916:13142): pid=62169 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766F667867677467727970736F70646971776576687965616574757671667764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253209.918:13143): pid=62169 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253209.921:13144): pid=62169 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253209.943:13145): pid=62153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253210.136:13146): pid=62169 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253210.136:13147): pid=62169 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253210.140:13148): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253210.140:13149): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253210.373:13150): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253210.373:13151): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253210.401:13152): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253210.401:13153): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253210.441:13154): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253210.441:13155): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253210.468:13156): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253210.468:13157): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253210.510:13158): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253210.510:13159): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253210.575:13160): pid=62221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253210.575:13161): pid=62221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669676D7871696B736B696667676E686665656D677774776977736F6B697571203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253210.576:13162): pid=62221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253210.579:13163): pid=62221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253210.795:13164): pid=62221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253210.796:13165): pid=62221 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253210.799:13166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253210.799:13167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253210.844:13168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253210.844:13169): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253210.905:13170): pid=62239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253210.905:13171): pid=62239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E676F71757270687270726A6E696C786667626A71747A696266767A67736372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253210.905:13172): pid=62239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253210.908:13173): pid=62239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253211.079:13174): pid=62239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253211.080:13175): pid=62239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253211.083:13176): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.083:13177): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253211.124:13178): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253211.125:13179): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253211.155:13180): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.155:13181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253211.267:13182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253211.268:13183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253211.297:13184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.297:13185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253211.339:13186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253211.339:13187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253211.371:13188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.371:13189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253211.412:13190): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253211.413:13191): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253211.453:13192): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.454:13193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253211.496:13194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253211.497:13195): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253211.539:13196): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.539:13197): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253211.580:13198): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253211.580:13199): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253211.616:13200): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.616:13201): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253211.661:13202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253211.661:13203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253211.712:13204): pid=62343 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253211.713:13205): pid=62343 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253211.714:13206): pid=62343 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253211.716:13207): pid=62343 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253211.879:13208): pid=62343 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253211.880:13209): pid=62343 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253211.884:13210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253211.884:13211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253212.003:13212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253212.003:13213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253212.066:13214): pid=62367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253212.066:13215): pid=62367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79717476686E736A64726175626169746F64637366797772776C6F717669696A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253212.067:13216): pid=62367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253212.069:13217): pid=62367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253212.236:13218): pid=62367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253212.236:13219): pid=62367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253212.238:13220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253212.238:13221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253213.703:13222): pid=62153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=62155 suid=74 rport=55204 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253213.703:13223): pid=62153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=62155 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253213.704:13224): pid=62153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=62153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253213.704:13225): pid=62153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253219.210:13226): prog-id=506 op=LOAD
type=BPF msg=audit(1781253219.210:13227): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.210:13228): prog-id=507 op=LOAD
type=BPF msg=audit(1781253219.210:13229): prog-id=508 op=LOAD
type=BPF msg=audit(1781253219.210:13230): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.210:13231): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.215:13232): prog-id=509 op=LOAD
type=BPF msg=audit(1781253219.215:13233): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.215:13234): prog-id=510 op=LOAD
type=BPF msg=audit(1781253219.215:13235): prog-id=511 op=LOAD
type=BPF msg=audit(1781253219.215:13236): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.215:13237): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.218:13238): prog-id=512 op=LOAD
type=BPF msg=audit(1781253219.218:13239): prog-id=513 op=LOAD
type=BPF msg=audit(1781253219.218:13240): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.218:13241): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.219:13242): prog-id=514 op=LOAD
type=BPF msg=audit(1781253219.220:13243): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.221:13244): prog-id=515 op=LOAD
type=BPF msg=audit(1781253219.221:13245): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.445:13246): prog-id=516 op=LOAD
type=BPF msg=audit(1781253219.445:13247): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.445:13248): prog-id=517 op=LOAD
type=BPF msg=audit(1781253219.445:13249): prog-id=518 op=LOAD
type=BPF msg=audit(1781253219.445:13250): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.445:13251): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.450:13252): prog-id=519 op=LOAD
type=BPF msg=audit(1781253219.450:13253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.450:13254): prog-id=520 op=LOAD
type=BPF msg=audit(1781253219.450:13255): prog-id=521 op=LOAD
type=BPF msg=audit(1781253219.450:13256): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.450:13257): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.452:13258): prog-id=522 op=LOAD
type=BPF msg=audit(1781253219.452:13259): prog-id=523 op=LOAD
type=BPF msg=audit(1781253219.452:13260): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.452:13261): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.453:13262): prog-id=524 op=LOAD
type=BPF msg=audit(1781253219.453:13263): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.454:13264): prog-id=525 op=LOAD
type=BPF msg=audit(1781253219.454:13265): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.718:13266): prog-id=526 op=LOAD
type=BPF msg=audit(1781253219.718:13267): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.718:13268): prog-id=527 op=LOAD
type=BPF msg=audit(1781253219.718:13269): prog-id=528 op=LOAD
type=BPF msg=audit(1781253219.718:13270): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.718:13271): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.722:13272): prog-id=529 op=LOAD
type=BPF msg=audit(1781253219.722:13273): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.722:13274): prog-id=530 op=LOAD
type=BPF msg=audit(1781253219.722:13275): prog-id=531 op=LOAD
type=BPF msg=audit(1781253219.722:13276): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.722:13277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.725:13278): prog-id=532 op=LOAD
type=BPF msg=audit(1781253219.725:13279): prog-id=533 op=LOAD
type=BPF msg=audit(1781253219.725:13280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.725:13281): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.726:13282): prog-id=534 op=LOAD
type=BPF msg=audit(1781253219.726:13283): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.727:13284): prog-id=535 op=LOAD
type=BPF msg=audit(1781253219.727:13285): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.950:13286): prog-id=536 op=LOAD
type=BPF msg=audit(1781253219.950:13287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.951:13288): prog-id=537 op=LOAD
type=BPF msg=audit(1781253219.951:13289): prog-id=538 op=LOAD
type=BPF msg=audit(1781253219.951:13290): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.951:13291): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.954:13292): prog-id=539 op=LOAD
type=BPF msg=audit(1781253219.954:13293): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.954:13294): prog-id=540 op=LOAD
type=BPF msg=audit(1781253219.954:13295): prog-id=541 op=LOAD
type=BPF msg=audit(1781253219.954:13296): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.954:13297): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.957:13298): prog-id=542 op=LOAD
type=BPF msg=audit(1781253219.957:13299): prog-id=543 op=LOAD
type=BPF msg=audit(1781253219.957:13300): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.957:13301): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.958:13302): prog-id=544 op=LOAD
type=BPF msg=audit(1781253219.958:13303): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253219.959:13304): prog-id=545 op=LOAD
type=BPF msg=audit(1781253219.959:13305): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1781253222.313:13306): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253222.313:13307): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253222.386:13308): pid=62832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253222.386:13309): pid=62832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B67646B6A65686D656D6E767473646F63716A77676B6C7263776F78726C6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253222.387:13310): pid=62832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253222.391:13311): pid=62832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253222.571:13312): pid=62832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253222.571:13313): pid=62832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253222.577:13314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253222.577:13315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253222.974:13316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253222.975:13317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253223.038:13318): pid=62848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253223.039:13319): pid=62848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C67686B7376776664777166707975786979636F6E656471777170656A7A6B76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253223.039:13320): pid=62848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253223.043:13321): pid=62848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253223.324:13322): pid=62848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253223.324:13323): pid=62848 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253223.328:13324): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253223.328:13325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253223.444:13326): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253223.444:13327): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253223.504:13328): pid=62864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253223.504:13329): pid=62864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64616569697670716868636676786C74696F786775796E6B796F79727A797474203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253223.505:13330): pid=62864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253223.507:13331): pid=62864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253223.684:13332): pid=62864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253223.684:13333): pid=62864 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253223.688:13334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253223.688:13335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253223.914:13336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253223.914:13337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253223.944:13338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253223.944:13339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253223.986:13340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253223.987:13341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253224.022:13342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253224.022:13343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253224.064:13344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253224.064:13345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253224.131:13346): pid=62914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253224.131:13347): pid=62914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A716B727A6A62656B74616F7A676969757570786375666A7476796E74726B6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253224.131:13348): pid=62914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253224.133:13349): pid=62914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253224.308:13350): pid=62914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253224.309:13351): pid=62914 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253224.313:13352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253224.313:13353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253224.355:13354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253224.355:13355): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253224.405:13356): pid=62932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253224.405:13357): pid=62932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77756E7178706263677276646579616374716C617471766E726A736C74727878203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253224.406:13358): pid=62932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253224.408:13359): pid=62932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253224.565:13360): pid=62932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253224.566:13361): pid=62932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253224.570:13362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253224.571:13363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253224.612:13364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253224.612:13365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253224.640:13366): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253224.640:13367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253224.756:13368): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253224.756:13369): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253224.802:13370): pid=62962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253224.803:13371): pid=62962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6772787A7864777578686D676E746578736B6F787A6B686E78626F61646E756C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253224.803:13372): pid=62962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253224.805:13373): pid=62962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253224.983:13374): pid=62962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253224.984:13375): pid=62962 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253224.988:13376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253224.988:13377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253225.126:13378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253225.126:13379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253225.192:13380): pid=62978 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253225.192:13381): pid=62978 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A676E757A626C676C65676F65646C7363686361766F6B65756B617765767770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253225.193:13382): pid=62978 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253225.195:13383): pid=62978 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253225.726:13384): pid=62978 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253225.726:13385): pid=62978 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253225.731:13386): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253225.731:13387): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253225.975:13388): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253225.975:13389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253226.012:13390): pid=63069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253226.013:13391): pid=63069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F6165717A6E6F6F747A656167686A73736C6F707566766967796F63687063203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253226.013:13392): pid=63069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253226.014:13393): pid=63069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253226.249:13394): pid=63069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253226.249:13395): pid=63069 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253226.253:13396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253226.253:13397): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253226.676:13398): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253226.676:13399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253226.729:13400): pid=63088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253226.730:13401): pid=63088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E72657261696F686F797174707968626961657575687069767871746A656270203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253226.730:13402): pid=63088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253226.732:13403): pid=63088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253226.903:13404): pid=63088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253226.903:13405): pid=63088 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253226.906:13406): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253226.906:13407): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253227.034:13408): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253227.035:13409): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253227.091:13410): pid=63104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253227.091:13411): pid=63104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617468707173746D68736A6D616A6C666C6B64696F67776E73656D64677A6E71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253227.092:13412): pid=63104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253227.094:13413): pid=63104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253227.308:13414): pid=63104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253227.309:13415): pid=63104 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253227.313:13416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253227.313:13417): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253227.639:13418): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253227.639:13419): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253227.692:13420): pid=63121 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253227.692:13421): pid=63121 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66776C6E78766B756267786166776E6178706F73707577656966637962677071203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253227.693:13422): pid=63121 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253227.695:13423): pid=63121 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253227.841:13424): pid=63121 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253227.841:13425): pid=63121 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253227.845:13426): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253227.845:13427): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253228.090:13428): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253228.090:13429): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253228.122:13430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253228.122:13431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253228.168:13432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253228.168:13433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253228.206:13434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253228.206:13435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253228.247:13436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253228.248:13437): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253228.304:13438): pid=63212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253228.304:13439): pid=63212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61617465746E78627075796172656C6865686E706D61726579716E7673666F6C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253228.305:13440): pid=63212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253228.307:13441): pid=63212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253228.460:13442): pid=63212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253228.460:13443): pid=63212 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253228.465:13444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253228.465:13445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253228.508:13446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253228.508:13447): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253228.568:13448): pid=63230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253228.569:13449): pid=63230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7765786E7676716D706368706176687A74787476776E65756574786C73627A6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253228.569:13450): pid=63230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253228.571:13451): pid=63230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253228.775:13452): pid=63230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253228.776:13453): pid=63230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253228.780:13454): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253228.780:13455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253228.822:13456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253228.822:13457): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253228.850:13458): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253228.850:13459): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253228.923:13460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253228.923:13461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253228.950:13462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253228.950:13463): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253228.992:13464): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253228.992:13465): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253229.020:13466): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253229.021:13467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253229.061:13468): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253229.061:13469): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253229.105:13470): pid=63292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253229.105:13471): pid=63292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F746C64756D736C65747966646766717A7A6872766F686C6A6E6477786179203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253229.105:13472): pid=63292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253229.107:13473): pid=63292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253229.272:13474): pid=63292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253229.273:13475): pid=63292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253229.276:13476): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253229.277:13477): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253229.318:13478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253229.318:13479): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253229.376:13480): pid=63310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253229.376:13481): pid=63310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A7866717275776578696D7769776D756D687065636B61766B6965776E6364203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253229.377:13482): pid=63310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253229.379:13483): pid=63310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253229.558:13484): pid=63310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253229.558:13485): pid=63310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253229.563:13486): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253229.563:13487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253229.604:13488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253229.604:13489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253229.636:13490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253229.636:13491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253229.804:13492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253229.804:13493): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253229.833:13494): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253229.833:13495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253229.875:13496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253229.875:13497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253229.910:13498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253229.911:13499): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253229.958:13500): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253229.958:13501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253230.019:13502): pid=63373 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253230.020:13503): pid=63373 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6B756C65656C6B736E65646B6E636C726573766F656975616D7579706C76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253230.020:13504): pid=63373 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253230.022:13505): pid=63373 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253230.224:13506): pid=63373 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253230.224:13507): pid=63373 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253230.228:13508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253230.228:13509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253230.270:13510): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253230.270:13511): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253230.328:13512): pid=63391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253230.328:13513): pid=63391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A667862776F7474737776747A76646870737375757A7479667263786B7467203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253230.328:13514): pid=63391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253230.330:13515): pid=63391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253230.512:13516): pid=63391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253230.513:13517): pid=63391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253230.516:13518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253230.516:13519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253230.551:13520): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253230.551:13521): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253230.584:13522): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253230.584:13523): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253230.679:13524): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253230.679:13525): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253230.708:13526): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253230.708:13527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253230.750:13528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253230.750:13529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253230.787:13530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253230.787:13531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253230.829:13532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253230.829:13533): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253230.892:13534): pid=63453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253230.893:13535): pid=63453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A74717461686478626273746679727363776A69746676677369666B746C7779203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253230.893:13536): pid=63453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253230.896:13537): pid=63453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253231.083:13538): pid=63453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253231.083:13539): pid=63453 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253231.086:13540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253231.086:13541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253231.128:13542): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253231.128:13543): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253231.177:13544): pid=63471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253231.177:13545): pid=63471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6673776F677374646E6E6B6A7475656D6164706E6869616578617769737A6E64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253231.177:13546): pid=63471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253231.179:13547): pid=63471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253231.356:13548): pid=63471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253231.356:13549): pid=63471 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253231.359:13550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253231.359:13551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253231.401:13552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253231.401:13553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253231.433:13554): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253231.434:13555): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253231.574:13556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253231.574:13557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253231.635:13558): pid=63542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253231.636:13559): pid=63542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7479706B6D67676C756A6366686879627363747A79786A626C6B796A72726D65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253231.636:13560): pid=63542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253231.638:13561): pid=63542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253232.148:13562): prog-id=546 op=LOAD
type=BPF msg=audit(1781253232.148:13563): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.149:13564): prog-id=547 op=LOAD
type=BPF msg=audit(1781253232.149:13565): prog-id=548 op=LOAD
type=BPF msg=audit(1781253232.149:13566): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.149:13567): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.152:13568): prog-id=549 op=LOAD
type=BPF msg=audit(1781253232.152:13569): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.152:13570): prog-id=550 op=LOAD
type=BPF msg=audit(1781253232.152:13571): prog-id=551 op=LOAD
type=BPF msg=audit(1781253232.152:13572): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.152:13573): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.154:13574): prog-id=552 op=LOAD
type=BPF msg=audit(1781253232.154:13575): prog-id=553 op=LOAD
type=BPF msg=audit(1781253232.154:13576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.154:13577): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.156:13578): prog-id=554 op=LOAD
type=BPF msg=audit(1781253232.156:13579): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253232.157:13580): prog-id=555 op=LOAD
type=BPF msg=audit(1781253232.157:13581): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253232.219:13582): pid=63542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253232.219:13583): pid=63542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253232.223:13584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253232.223:13585): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253232.361:13586): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253232.361:13587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253232.385:13588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253232.385:13589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253232.426:13590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253232.427:13591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253232.457:13592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253232.457:13593): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253232.499:13594): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253232.499:13595): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253232.552:13596): pid=63629 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253232.552:13597): pid=63629 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716567707768667A756F7979736E7367616B6F716D6473766D6263707A69706B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253232.553:13598): pid=63629 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253232.556:13599): pid=63629 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253232.728:13600): pid=63629 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253232.728:13601): pid=63629 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253232.732:13602): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253232.732:13603): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253232.778:13604): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253232.778:13605): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253232.825:13606): pid=63647 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253232.825:13607): pid=63647 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736571786E6F7A7166757A68687175756A696C667A646A706375787471676367203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253232.826:13608): pid=63647 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253232.828:13609): pid=63647 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253232.979:13610): pid=63647 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253232.979:13611): pid=63647 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253232.982:13612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253232.982:13613): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253233.017:13614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253233.017:13615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253233.048:13616): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253233.048:13617): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253233.170:13618): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253233.170:13619): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253233.200:13620): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253233.200:13621): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253233.242:13622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253233.242:13623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253233.280:13624): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253233.280:13625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253233.322:13626): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253233.322:13627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253233.384:13628): pid=63709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253233.384:13629): pid=63709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62687468666561627661766D7771746C766E726A72696462716875756A616E76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253233.385:13630): pid=63709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253233.388:13631): pid=63709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253233.581:13632): pid=63709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253233.581:13633): pid=63709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253233.586:13634): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253233.586:13635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253233.627:13636): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253233.627:13637): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253233.676:13638): pid=63727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253233.676:13639): pid=63727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6961766170666A72726671636264656163636262686262746565636879636A6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253233.676:13640): pid=63727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253233.678:13641): pid=63727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253233.863:13642): pid=63727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253233.864:13643): pid=63727 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253233.869:13644): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253233.869:13645): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253233.910:13646): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253233.910:13647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253233.938:13648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253233.938:13649): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253234.059:13650): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253234.060:13651): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253234.125:13652): pid=63757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253234.125:13653): pid=63757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75666D7662696B6C6D69756D63716B6C73616964726C717676776E68756E6864203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253234.126:13654): pid=63757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253234.129:13655): pid=63757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253234.643:13656): prog-id=556 op=LOAD
type=BPF msg=audit(1781253234.643:13657): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.643:13658): prog-id=557 op=LOAD
type=BPF msg=audit(1781253234.644:13659): prog-id=558 op=LOAD
type=BPF msg=audit(1781253234.644:13660): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.644:13661): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.647:13662): prog-id=559 op=LOAD
type=BPF msg=audit(1781253234.647:13663): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.647:13664): prog-id=560 op=LOAD
type=BPF msg=audit(1781253234.647:13665): prog-id=561 op=LOAD
type=BPF msg=audit(1781253234.647:13666): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.647:13667): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.649:13668): prog-id=562 op=LOAD
type=BPF msg=audit(1781253234.649:13669): prog-id=563 op=LOAD
type=BPF msg=audit(1781253234.649:13670): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.649:13671): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.651:13672): prog-id=564 op=LOAD
type=BPF msg=audit(1781253234.651:13673): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253234.652:13674): prog-id=565 op=LOAD
type=BPF msg=audit(1781253234.652:13675): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253234.729:13676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253234.729:13677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253234.759:13678): pid=63757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253234.759:13679): pid=63757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253234.763:13680): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253234.763:13681): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253235.026:13682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253235.026:13683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253235.068:13684): pid=63813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253235.068:13685): pid=63813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71697A6F776C747474617A69747168796A6570736E6966756D6F64757661716E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253235.069:13686): pid=63813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253235.072:13687): pid=63813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253235.231:13688): pid=63813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253235.231:13689): pid=63813 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253235.236:13690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253235.236:13691): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253235.522:13692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253235.522:13693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253235.587:13694): pid=63829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253235.588:13695): pid=63829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C766F62637279747474667866787068776D796F6B6F6B7466687865707473203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253235.589:13696): pid=63829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253235.593:13697): pid=63829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253235.602:13698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253235.794:13699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253236.089:13700): pid=63829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253236.090:13701): pid=63829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253236.133:13702): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253236.133:13703): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253236.882:13704): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253236.882:13705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253236.946:13706): pid=63893 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253236.946:13707): pid=63893 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797763646D757373746F65666D6164646571776169797164636D6F617671616B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253236.948:13708): pid=63893 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253236.951:13709): pid=63893 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253237.430:13710): prog-id=566 op=LOAD
type=SYSCALL msg=audit(1781253237.430:13710): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe9f5ec450 a2=90 a3=9500000000 items=0 ppid=64114 pid=64115 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253237.430:13710): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663035663964653739386237616561343438353963613062653661356537
type=BPF msg=audit(1781253237.441:13711): prog-id=567 op=LOAD
type=SYSCALL msg=audit(1781253237.441:13711): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda8f3be90 a2=90 a3=9500000000 items=0 ppid=64118 pid=64119 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253237.441:13711): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353032666537363639366236363465356632373331386439313531393031
type=BPF msg=audit(1781253237.492:13712): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253237.494:13713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253237.506:13714): prog-id=568 op=LOAD
type=SYSCALL msg=audit(1781253237.506:13714): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff8e4814b0 a2=90 a3=9500000000 items=0 ppid=64147 pid=64148 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253237.506:13714): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653537386431326261393163393836383662343364656663393730653737
type=BPF msg=audit(1781253237.568:13715): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253237.571:13716): prog-id=569 op=LOAD
type=SYSCALL msg=audit(1781253237.571:13716): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff4874650 a2=90 a3=9500000000 items=0 ppid=64175 pid=64176 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253237.571:13716): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636365396363613466393764353561356461613037626563646135383966
type=BPF msg=audit(1781253237.621:13717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253237.631:13718): prog-id=570 op=LOAD
type=SYSCALL msg=audit(1781253237.631:13718): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff47b626b0 a2=90 a3=9500000000 items=0 ppid=64203 pid=64205 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253237.631:13718): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383963343835373933343462326366653539613862383465366232376136
type=BPF msg=audit(1781253237.634:13719): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253237.732:13720): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253238.011:13721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253238.266:13722): prog-id=571 op=LOAD
type=SYSCALL msg=audit(1781253238.266:13722): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef182aef0 a2=90 a3=9500000000 items=0 ppid=64584 pid=64585 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253238.266:13722): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623662613538393430313066666237393533343339326562633338323062
type=BPF msg=audit(1781253238.270:13723): prog-id=572 op=LOAD
type=SYSCALL msg=audit(1781253238.270:13723): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3a9bdd20 a2=90 a3=9500000000 items=0 ppid=64587 pid=64588 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253238.270:13723): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666433323137613432326462343731303166613536313735383363633633
type=BPF msg=audit(1781253238.307:13724): prog-id=573 op=LOAD
type=SYSCALL msg=audit(1781253238.307:13724): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe5b7aa3e0 a2=90 a3=9500000000 items=0 ppid=64597 pid=64598 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253238.307:13724): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376365623565326563326139346165393736303562656538383836343665
type=BPF msg=audit(1781253238.310:13725): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253238.362:13726): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253238.388:13727): prog-id=574 op=LOAD
type=SYSCALL msg=audit(1781253238.388:13727): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd1b107a0 a2=90 a3=9500000000 items=0 ppid=64642 pid=64643 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253238.388:13727): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613632333164336434313566616432363737633663353165356234353338
type=BPF msg=audit(1781253238.391:13728): prog-id=575 op=LOAD
type=SYSCALL msg=audit(1781253238.391:13728): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffca732cb10 a2=90 a3=9500000000 items=0 ppid=64644 pid=64645 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253238.391:13728): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613963376263613532306633323233656334343338356566646264626138
type=BPF msg=audit(1781253238.481:13729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253238.537:13730): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253238.862:13731): prog-id=576 op=LOAD
type=SYSCALL msg=audit(1781253238.862:13731): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe04bb2d40 a2=90 a3=9500000000 items=0 ppid=64905 pid=64906 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253238.862:13731): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323464666262373839643464366163316532336530376461623162313666
type=BPF msg=audit(1781253238.895:13732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253238.910:13733): prog-id=577 op=LOAD
type=SYSCALL msg=audit(1781253238.910:13733): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcfc71fdc0 a2=90 a3=9500000000 items=0 ppid=64920 pid=64922 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253238.910:13733): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386262346131613461633836643161663062373836336435313864336439
type=BPF msg=audit(1781253241.288:13734): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781253245.916:13735): pid=65983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=65983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253246.143:13736): pid=65982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=65983 suid=74 rport=32104 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253246.143:13737): pid=65982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=65983 suid=74 rport=32104 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253246.970:13738): prog-id=0 op=UNLOAD
type=USER_AUTH msg=audit(1781253247.186:13739): pid=65982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253247.571:13740): prog-id=578 op=LOAD
type=SYSCALL msg=audit(1781253247.571:13740): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe075f4710 a2=90 a3=9500000000 items=0 ppid=66230 pid=66231 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253247.571:13740): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373839396565386538316439623234656436383965393131333532663735
type=BPF msg=audit(1781253247.575:13741): prog-id=579 op=LOAD
type=SYSCALL msg=audit(1781253247.575:13741): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd3dfa8280 a2=90 a3=9500000000 items=0 ppid=66232 pid=66234 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253247.575:13741): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373230326636336433313632373837333039646164646230396662383438
type=SERVICE_START msg=audit(1781253247.632:13742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253247.644:13743): prog-id=580 op=LOAD
type=SYSCALL msg=audit(1781253247.644:13743): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcbe0c7950 a2=90 a3=9500000000 items=0 ppid=66242 pid=66243 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253247.644:13743): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643764386462363838653738386661323862313639656131666236323162
type=BPF msg=audit(1781253247.672:13744): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253247.900:13745): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253247.928:13746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253248.206:13747): pid=63893 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253248.207:13748): pid=63893 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253248.212:13749): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253248.212:13750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253248.414:13751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253248.414:13752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253248.473:13753): pid=66401 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253248.473:13754): pid=66401 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E69616970686B727963696F636E756675736A647875656464746B71647172203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253248.474:13755): pid=66401 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253248.478:13756): pid=66401 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253248.654:13757): pid=66401 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253248.654:13758): pid=66401 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253248.657:13759): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253248.657:13760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253248.699:13761): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253248.699:13762): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253248.757:13763): pid=66417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253248.757:13764): pid=66417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63646C767763686E746463626F6965686367776F69686A6170787A6B68756F6A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253248.758:13765): pid=66417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253248.761:13766): pid=66417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253248.936:13767): pid=66417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253248.937:13768): pid=66417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253248.940:13769): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253248.941:13770): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253248.983:13771): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253248.983:13772): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253249.010:13773): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253249.010:13774): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253249.052:13775): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253249.052:13776): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253249.085:13777): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253249.085:13778): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253249.274:13779): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253249.274:13780): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253249.314:13781): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253249.314:13782): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253249.363:13783): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253249.363:13784): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253249.412:13785): pid=66479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253249.412:13786): pid=66479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7967666670697A6F6E6B7372736F666A71757271786579706C6E767978616A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253249.412:13787): pid=66479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253249.414:13788): pid=66479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253249.604:13789): pid=66479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253249.605:13790): pid=66479 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253249.607:13791): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253249.607:13792): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253249.650:13793): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253249.650:13794): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253249.694:13795): pid=66536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253249.694:13796): pid=66536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74727A6274646177736E6B646B716B6B7867697A79706F68727A6F7A7879666C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253249.695:13797): pid=66536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253249.697:13798): pid=66536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253250.198:13799): prog-id=581 op=LOAD
type=BPF msg=audit(1781253250.198:13800): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.198:13801): prog-id=582 op=LOAD
type=BPF msg=audit(1781253250.198:13802): prog-id=583 op=LOAD
type=BPF msg=audit(1781253250.198:13803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.198:13804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.202:13805): prog-id=584 op=LOAD
type=BPF msg=audit(1781253250.202:13806): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.202:13807): prog-id=585 op=LOAD
type=BPF msg=audit(1781253250.202:13808): prog-id=586 op=LOAD
type=BPF msg=audit(1781253250.202:13809): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.202:13810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.204:13811): prog-id=587 op=LOAD
type=BPF msg=audit(1781253250.204:13812): prog-id=588 op=LOAD
type=BPF msg=audit(1781253250.204:13813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.204:13814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.205:13815): prog-id=589 op=LOAD
type=BPF msg=audit(1781253250.205:13816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253250.206:13817): prog-id=590 op=LOAD
type=BPF msg=audit(1781253250.206:13818): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253250.239:13819): pid=66536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253250.240:13820): pid=66536 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253250.245:13821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253250.245:13822): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253250.268:13823): pid=66575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=66575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253250.525:13824): pid=66574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=66575 suid=74 rport=33460 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253250.525:13825): pid=66574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=66575 suid=74 rport=33460 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253250.852:13826): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253250.852:13827): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253250.920:13828): pid=66589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253250.920:13829): pid=66589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C646B64716F7A7A61666D767A67686570787265796A6E7967656464617469203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253250.921:13830): pid=66589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253250.925:13831): pid=66589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253251.049:13832): pid=65982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=65983 suid=74 rport=32104 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253251.049:13833): pid=65982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=65983 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253251.050:13834): pid=65982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=65982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253251.050:13835): pid=65982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253251.479:13836): prog-id=591 op=LOAD
type=BPF msg=audit(1781253251.479:13837): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.479:13838): prog-id=592 op=LOAD
type=BPF msg=audit(1781253251.480:13839): prog-id=593 op=LOAD
type=BPF msg=audit(1781253251.480:13840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.480:13841): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.483:13842): prog-id=594 op=LOAD
type=BPF msg=audit(1781253251.483:13843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.483:13844): prog-id=595 op=LOAD
type=BPF msg=audit(1781253251.483:13845): prog-id=596 op=LOAD
type=BPF msg=audit(1781253251.483:13846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.483:13847): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.486:13848): prog-id=597 op=LOAD
type=BPF msg=audit(1781253251.486:13849): prog-id=598 op=LOAD
type=BPF msg=audit(1781253251.486:13850): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.486:13851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.487:13852): prog-id=599 op=LOAD
type=BPF msg=audit(1781253251.487:13853): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253251.488:13854): prog-id=600 op=LOAD
type=BPF msg=audit(1781253251.488:13855): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253251.605:13856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_clustercheck comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253251.627:13857): pid=66589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253251.627:13858): pid=66589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253251.631:13859): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253251.631:13860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253251.662:13861): pid=66574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="git" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253251.690:13862): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253251.690:13863): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253251.716:13864): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253251.717:13865): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253251.914:13866): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253251.914:13867): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253251.975:13868): pid=66711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253251.976:13869): pid=66711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79757766767A7A757878676D7063726165657A7873726C7A6467636777636165203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253251.976:13870): pid=66711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253251.981:13871): pid=66711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253252.157:13872): pid=66711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253252.158:13873): pid=66711 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253252.162:13874): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253252.162:13875): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253252.563:13876): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253252.563:13877): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253252.591:13878): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253252.591:13879): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253252.633:13880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253252.633:13881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253252.667:13882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253252.667:13883): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253252.709:13884): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253252.709:13885): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253252.758:13886): pid=66759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253252.758:13887): pid=66759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6761637A68676D756C73666B616865686F61766B6A66687A6766637170787176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253252.759:13888): pid=66759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253252.760:13889): pid=66759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253252.929:13890): pid=66759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253252.930:13891): pid=66759 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253252.933:13892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253252.933:13893): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253252.975:13894): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253252.975:13895): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253253.010:13896): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253253.010:13897): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253253.051:13898): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253253.052:13899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253253.080:13900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253253.080:13901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253253.122:13902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253253.122:13903): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253253.171:13904): pid=66802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253253.171:13905): pid=66802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7766697161696A6C646D6F69696C72736D746679687A66656F77707172696B7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253253.172:13906): pid=66802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253253.175:13907): pid=66802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253253.339:13908): pid=66802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253253.339:13909): pid=66802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253253.343:13910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253253.344:13911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253253.391:13912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253253.392:13913): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253253.424:13914): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253253.424:13915): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253253.528:13916): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253253.529:13917): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253253.585:13918): pid=66832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253253.585:13919): pid=66832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78656661616373696E776E65726F75726376756E6C69746676766E7775797561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253253.586:13920): pid=66832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253253.587:13921): pid=66832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253253.821:13922): pid=66832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253253.821:13923): pid=66832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253253.825:13924): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253253.825:13925): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253254.255:13926): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253254.255:13927): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253254.318:13928): pid=66958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253254.319:13929): pid=66958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A6475686D646B6378746771627867786A776E746D7076786972666E666A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253254.319:13930): pid=66958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253254.321:13931): pid=66958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253254.524:13932): pid=66958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253254.524:13933): pid=66958 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253254.528:13934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253254.529:13935): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253254.640:13936): pid=66574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=66575 suid=74 rport=33460 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253254.641:13937): pid=66574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=66575 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253254.642:13938): pid=66574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=66574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253254.642:13939): pid=66574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253254.643:13940): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253254.644:13941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253254.705:13942): pid=66974 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253254.706:13943): pid=66974 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727261657666756D726E687472656F63656264706C7761796C686778656C6168203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253254.706:13944): pid=66974 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253254.710:13945): pid=66974 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253254.942:13946): pid=66974 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253254.942:13947): pid=66974 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253254.947:13948): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253254.947:13949): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1781253263.368:13950): prog-id=601 op=LOAD
type=SYSCALL msg=audit(1781253263.368:13950): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc8ce8f4b0 a2=90 a3=9500000000 items=0 ppid=67146 pid=67147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253263.368:13950): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356638346264633866343763653233346230376137383336303066306365
type=BPF msg=audit(1781253263.780:13951): prog-id=602 op=LOAD
type=BPF msg=audit(1781253263.781:13952): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.781:13953): prog-id=603 op=LOAD
type=BPF msg=audit(1781253263.781:13954): prog-id=604 op=LOAD
type=BPF msg=audit(1781253263.781:13955): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.781:13956): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.785:13957): prog-id=605 op=LOAD
type=BPF msg=audit(1781253263.785:13958): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.785:13959): prog-id=606 op=LOAD
type=BPF msg=audit(1781253263.785:13960): prog-id=607 op=LOAD
type=BPF msg=audit(1781253263.785:13961): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.785:13962): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.787:13963): prog-id=608 op=LOAD
type=BPF msg=audit(1781253263.787:13964): prog-id=609 op=LOAD
type=BPF msg=audit(1781253263.787:13965): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.787:13966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.789:13967): prog-id=610 op=LOAD
type=BPF msg=audit(1781253263.789:13968): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253263.790:13969): prog-id=611 op=LOAD
type=BPF msg=audit(1781253263.790:13970): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253266.171:13971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253266.293:13972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253268.174:13973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253268.522:13974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253278.172:13975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253278.336:13976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253289.719:13977): pid=68291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253289.750:13978): pid=68290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=68291 suid=74 rport=42756 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253289.750:13979): pid=68290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=68291 suid=74 rport=42756 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253290.016:13980): pid=68290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253293.671:13981): pid=68290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=68291 suid=74 rport=42756 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253293.671:13982): pid=68290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68291 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253293.673:13983): pid=68290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253293.673:13984): pid=68290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253297.178:13985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253297.314:13986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253298.335:13987): pid=68613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68613 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253298.470:13988): pid=68612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=68613 suid=74 rport=58590 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253298.470:13989): pid=68612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=68613 suid=74 rport=58590 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253299.138:13990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253299.141:13991): pid=68612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="access" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253299.471:13992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253301.424:13993): pid=68720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253301.425:13994): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=68720 suid=74 rport=49754 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=125.228.239.89 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253301.426:13995): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=68720 suid=74 rport=49754 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=125.228.239.89 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253302.763:13996): pid=68612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=68613 suid=74 rport=58590 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253302.763:13997): pid=68612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68613 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253302.764:13998): pid=68612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68612 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253302.764:13999): pid=68612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253304.074:14000): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="unknown" exe="/usr/sbin/sshd" hostname=125.228.239.89 addr=125.228.239.89 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253305.718:14001): pid=68909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253305.924:14002): pid=68908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=68909 suid=74 rport=59582 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253305.925:14003): pid=68908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=68909 suid=74 rport=59582 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253306.882:14004): pid=68908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253307.645:14005): pid=68934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="unknown" exe="/usr/sbin/sshd" hostname=125.228.239.89 addr=125.228.239.89 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253309.172:14006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253309.339:14007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253310.056:14008): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.228.239.89 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253310.722:14009): pid=68908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=68909 suid=74 rport=59582 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253310.722:14010): pid=68908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68909 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253310.723:14011): pid=68908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253310.723:14012): pid=68908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253310.903:14013): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=68720 suid=74 rport=49754 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=125.228.239.89 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253310.904:14014): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68720 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253310.905:14015): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=68694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253310.905:14016): pid=68694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.228.239.89 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253318.100:14017): pid=69342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=69342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253318.196:14018): pid=69341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=69342 suid=74 rport=43494 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253318.196:14019): pid=69341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=69342 suid=74 rport=43494 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253318.699:14020): pid=69341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253322.430:14021): pid=69341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=69342 suid=74 rport=43494 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253322.430:14022): pid=69341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=69342 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253322.431:14023): pid=69341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=69341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253322.431:14024): pid=69341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253328.173:14025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253328.297:14026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253330.174:14027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253330.480:14028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253336.512:14029): prog-id=612 op=LOAD
type=SYSCALL msg=audit(1781253336.512:14029): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd9eeaa360 a2=90 a3=9500000000 items=0 ppid=70168 pid=70169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253336.512:14029): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343235643939383764396238303031633466393266373132616339633464
type=BPF msg=audit(1781253336.909:14030): prog-id=613 op=LOAD
type=BPF msg=audit(1781253336.909:14031): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.909:14032): prog-id=614 op=LOAD
type=BPF msg=audit(1781253336.909:14033): prog-id=615 op=LOAD
type=BPF msg=audit(1781253336.909:14034): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.909:14035): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.913:14036): prog-id=616 op=LOAD
type=BPF msg=audit(1781253336.913:14037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.913:14038): prog-id=617 op=LOAD
type=BPF msg=audit(1781253336.913:14039): prog-id=618 op=LOAD
type=BPF msg=audit(1781253336.913:14040): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.913:14041): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.915:14042): prog-id=619 op=LOAD
type=BPF msg=audit(1781253336.915:14043): prog-id=620 op=LOAD
type=BPF msg=audit(1781253336.915:14044): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.915:14045): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.917:14046): prog-id=621 op=LOAD
type=BPF msg=audit(1781253336.917:14047): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253336.918:14048): prog-id=622 op=LOAD
type=BPF msg=audit(1781253336.918:14049): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253340.170:14050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253340.328:14051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253341.439:14052): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.051:14053): prog-id=623 op=LOAD
type=SYSCALL msg=audit(1781253342.051:14053): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcfb544860 a2=90 a3=9500000000 items=0 ppid=70715 pid=70716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253342.051:14053): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376662613139323435303030373961393333626535303664643735663937
type=BPF msg=audit(1781253342.415:14054): prog-id=624 op=LOAD
type=BPF msg=audit(1781253342.415:14055): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.415:14056): prog-id=625 op=LOAD
type=BPF msg=audit(1781253342.415:14057): prog-id=626 op=LOAD
type=BPF msg=audit(1781253342.416:14058): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.416:14059): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.419:14060): prog-id=627 op=LOAD
type=BPF msg=audit(1781253342.419:14061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.420:14062): prog-id=628 op=LOAD
type=BPF msg=audit(1781253342.420:14063): prog-id=629 op=LOAD
type=BPF msg=audit(1781253342.420:14064): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.420:14065): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.422:14066): prog-id=630 op=LOAD
type=BPF msg=audit(1781253342.422:14067): prog-id=631 op=LOAD
type=BPF msg=audit(1781253342.422:14068): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.422:14069): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.423:14070): prog-id=632 op=LOAD
type=BPF msg=audit(1781253342.423:14071): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253342.424:14072): prog-id=633 op=LOAD
type=BPF msg=audit(1781253342.424:14073): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253359.173:14074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253359.315:14075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253361.180:14076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253361.487:14077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253366.601:14078): pid=72593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=72593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253366.874:14079): pid=72592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=72593 suid=74 rport=35382 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253366.874:14080): pid=72592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=72593 suid=74 rport=35382 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253368.057:14081): pid=72592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253371.170:14082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253371.350:14083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253371.945:14084): pid=72592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=72593 suid=74 rport=35382 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253371.946:14085): pid=72592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=72593 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253371.947:14086): pid=72592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=72592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253371.947:14087): pid=72592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253384.448:14088): prog-id=634 op=LOAD
type=SYSCALL msg=audit(1781253384.448:14088): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdf4642d50 a2=90 a3=9500000000 items=0 ppid=74054 pid=74055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253384.448:14088): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636534313265623835653762376530316666613335396261343736613061
type=BPF msg=audit(1781253384.910:14089): prog-id=635 op=LOAD
type=BPF msg=audit(1781253384.910:14090): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.910:14091): prog-id=636 op=LOAD
type=BPF msg=audit(1781253384.910:14092): prog-id=637 op=LOAD
type=BPF msg=audit(1781253384.910:14093): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.910:14094): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.914:14095): prog-id=638 op=LOAD
type=BPF msg=audit(1781253384.914:14096): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.914:14097): prog-id=639 op=LOAD
type=BPF msg=audit(1781253384.914:14098): prog-id=640 op=LOAD
type=BPF msg=audit(1781253384.914:14099): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.914:14100): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.917:14101): prog-id=641 op=LOAD
type=BPF msg=audit(1781253384.917:14102): prog-id=642 op=LOAD
type=BPF msg=audit(1781253384.917:14103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.917:14104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.918:14105): prog-id=643 op=LOAD
type=BPF msg=audit(1781253384.918:14106): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253384.919:14107): prog-id=644 op=LOAD
type=BPF msg=audit(1781253384.919:14108): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781253385.261:14109): pid=74290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=74290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253385.397:14110): pid=74285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=74290 suid=74 rport=33736 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253385.398:14111): pid=74285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=74290 suid=74 rport=33736 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253386.053:14112): pid=74285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="master" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253388.083:14113): pid=74285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=74290 suid=74 rport=33736 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253388.083:14114): pid=74285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=74290 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253388.084:14115): pid=74285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=74285 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253388.084:14116): pid=74285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253390.175:14117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253390.317:14118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253392.172:14119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253392.509:14120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253392.628:14121): pid=74715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=74715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253392.889:14122): pid=74714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=74715 suid=74 rport=32928 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253392.889:14123): pid=74714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=74715 suid=74 rport=32928 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253394.161:14124): pid=74714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253402.181:14125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253402.359:14126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253410.795:14127): pid=75586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=75586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253410.828:14128): pid=75585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=75586 suid=74 rport=35668 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253410.828:14129): pid=75585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=75586 suid=74 rport=35668 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253411.072:14130): pid=75585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pc" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253413.355:14131): pid=75585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=75586 suid=74 rport=35668 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253413.355:14132): pid=75585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=75586 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253413.357:14133): pid=75585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=75585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253413.357:14134): pid=75585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253421.169:14135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253421.315:14136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253423.177:14137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253423.462:14138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253433.174:14139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253433.369:14140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253433.510:14141): prog-id=645 op=LOAD
type=SYSCALL msg=audit(1781253433.510:14141): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc6fd0cc40 a2=90 a3=9500000000 items=0 ppid=76714 pid=76715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253433.510:14141): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383737383763616138636435616166636133346365613261306135613030
type=BPF msg=audit(1781253433.954:14142): prog-id=646 op=LOAD
type=BPF msg=audit(1781253433.954:14143): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.954:14144): prog-id=647 op=LOAD
type=BPF msg=audit(1781253433.954:14145): prog-id=648 op=LOAD
type=BPF msg=audit(1781253433.954:14146): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.954:14147): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.958:14148): prog-id=649 op=LOAD
type=BPF msg=audit(1781253433.958:14149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.959:14150): prog-id=650 op=LOAD
type=BPF msg=audit(1781253433.959:14151): prog-id=651 op=LOAD
type=BPF msg=audit(1781253433.959:14152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.959:14153): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.961:14154): prog-id=652 op=LOAD
type=BPF msg=audit(1781253433.961:14155): prog-id=653 op=LOAD
type=BPF msg=audit(1781253433.961:14156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.961:14157): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.963:14158): prog-id=654 op=LOAD
type=BPF msg=audit(1781253433.963:14159): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253433.964:14160): prog-id=655 op=LOAD
type=BPF msg=audit(1781253433.964:14161): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781253446.557:14162): pid=78074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=78074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253446.559:14163): pid=77997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78074 suid=74 rport=43976 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253446.559:14164): pid=77997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78074 suid=74 rport=43976 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253447.468:14165): pid=77997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253449.137:14166): pid=78199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=78199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253449.233:14167): pid=78198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78199 suid=74 rport=54406 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253449.233:14168): pid=78198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78199 suid=74 rport=54406 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253449.722:14169): pid=77997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78074 suid=74 rport=43976 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253449.722:14170): pid=77997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=78074 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253449.723:14171): pid=77997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=77997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253449.723:14172): pid=77997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253450.124:14173): pid=78198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253451.363:14174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253451.534:14175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253453.468:14176): pid=78198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78199 suid=74 rport=54406 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253453.469:14177): pid=78198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=78199 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253453.469:14178): pid=78198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=78198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253453.469:14179): pid=78198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253453.489:14180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253453.863:14181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253462.479:14182): pid=78625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=78625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1781253464.180:14183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253464.351:14184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253470.663:14185): pid=80155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=80155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253470.789:14186): pid=80154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=80155 suid=74 rport=37114 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253470.790:14187): pid=80154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=80155 suid=74 rport=37114 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253471.408:14188): pid=80154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="camera" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253473.519:14189): pid=80154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=80155 suid=74 rport=37114 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253473.519:14190): pid=80154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=80155 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253473.520:14191): pid=80154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=80154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253473.520:14192): pid=80154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253478.650:14193): pid=80610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=80610 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253478.909:14194): pid=80609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=80610 suid=74 rport=43110 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253478.909:14195): pid=80609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=80610 suid=74 rport=43110 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253480.084:14196): pid=80609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253482.173:14197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253482.321:14198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253483.975:14199): pid=80609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=80610 suid=74 rport=43110 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253483.975:14200): pid=80609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=80610 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253483.977:14201): pid=80609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=80609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253483.977:14202): pid=80609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253483.994:14203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253484.345:14204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253485.962:14205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253485.962:14206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253485.995:14207): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253485.995:14208): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253486.041:14209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253486.041:14210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253486.077:14211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253486.077:14212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253486.125:14213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253486.125:14214): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253486.190:14215): pid=81194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253486.190:14216): pid=81194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62766E61696F687A657166697A6B7A66686268787166657373646B68756672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253486.192:14217): pid=81194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253486.196:14218): pid=81194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253486.380:14219): pid=81194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253486.381:14220): pid=81194 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253486.385:14221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253486.385:14222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253486.433:14223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253486.433:14224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253486.468:14225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253486.469:14226): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253486.516:14227): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253486.516:14228): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253486.549:14229): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253486.549:14230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253486.590:14231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253486.590:14232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253486.657:14233): pid=81247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253486.657:14234): pid=81247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E656E64636A686F69797666756C766C63627A6D646A796476746875717769203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253486.658:14235): pid=81247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253486.661:14236): pid=81247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253486.830:14237): pid=81247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253486.831:14238): pid=81247 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253486.835:14239): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253486.835:14240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253486.870:14241): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253486.870:14242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253486.900:14243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253486.900:14244): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253488.078:14245): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253488.078:14246): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253488.130:14247): pid=81317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253488.131:14248): pid=81317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D686D65636B6D6263667A6D737863686F686B6F7A706F6568716B736377786F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253488.131:14249): pid=81317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253488.133:14250): pid=81317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253488.319:14251): pid=81317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253488.320:14252): pid=81317 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253488.323:14253): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253488.323:14254): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253488.663:14255): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253488.663:14256): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253488.691:14257): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253488.691:14258): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253488.733:14259): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253488.733:14260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253488.769:14261): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253488.769:14262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253488.810:14263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253488.810:14264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253488.864:14265): pid=81391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253488.864:14266): pid=81391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A69766D636B626F73646771646D6B7077747669697679676571647676686671203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253488.865:14267): pid=81391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253488.867:14268): pid=81391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253489.035:14269): pid=81391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253489.036:14270): pid=81391 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253489.041:14271): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.041:14272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.111:14273): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.111:14274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253489.164:14275): pid=81409 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253489.164:14276): pid=81409 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F777A6C6A6E6D66796968617665656C6579766D6A776A79646B766F637261203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253489.164:14277): pid=81409 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253489.166:14278): pid=81409 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253489.345:14279): pid=81409 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253489.346:14280): pid=81409 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253489.350:14281): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.350:14282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.393:14283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.393:14284): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253489.422:14285): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.422:14286): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.548:14287): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.548:14288): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253489.573:14289): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.573:14290): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.616:14291): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.616:14292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253489.652:14293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.652:14294): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.705:14295): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.705:14296): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253489.745:14297): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.746:14298): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.794:14299): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.794:14300): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253489.837:14301): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.837:14302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.880:14303): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.880:14304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253489.907:14305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253489.908:14306): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253489.951:14307): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253489.951:14308): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253490.018:14309): pid=81539 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253490.019:14310): pid=81539 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253490.019:14311): pid=81539 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253490.023:14312): pid=81539 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253490.209:14313): pid=81539 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253490.209:14314): pid=81539 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253490.212:14315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253490.212:14316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253490.313:14317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253490.313:14318): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253490.376:14319): pid=81563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253490.376:14320): pid=81563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74737778627464707764716F686D666378726A67736E64617267686C626A787A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253490.377:14321): pid=81563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253490.379:14322): pid=81563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253490.542:14323): pid=81563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253490.542:14324): pid=81563 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253490.546:14325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253490.546:14326): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253495.172:14327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253495.369:14328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253499.595:14329): pid=82290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=82290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253499.720:14330): pid=82289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=82290 suid=74 rport=51964 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253499.721:14331): pid=82289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=82290 suid=74 rport=51964 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253500.625:14332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253500.625:14333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253500.693:14334): pid=82328 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253500.693:14335): pid=82328 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676871636C6B7A6563616C6B6D726574716B786A6375777A686B6F6570727262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253500.694:14336): pid=82328 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253500.699:14337): pid=82328 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253500.877:14338): pid=82328 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253500.878:14339): pid=82328 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253500.882:14340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253500.882:14341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253501.429:14342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253501.429:14343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253501.483:14344): pid=82368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253501.483:14345): pid=82368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69666D6C716C66766578786E6A706A6276616E686373676B6F6D756364787371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253501.484:14346): pid=82368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253501.486:14347): pid=82368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253501.670:14348): pid=82368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253501.670:14349): pid=82368 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253501.674:14350): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253501.674:14351): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253501.763:14352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253501.764:14353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253501.811:14354): pid=82388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253501.811:14355): pid=82388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6668706862726C7667636A6B7072666466756B77627276626569766D6F66706A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253501.813:14356): pid=82388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253501.814:14357): pid=82388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253502.003:14358): pid=82388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253502.004:14359): pid=82388 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253502.008:14360): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253502.008:14361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253502.179:14362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253502.179:14363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253502.213:14364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253502.214:14365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253502.275:14366): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253502.275:14367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253502.312:14368): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253502.312:14369): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253502.354:14370): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253502.354:14371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253502.413:14372): pid=82458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253502.414:14373): pid=82458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7377726762766E7879637478696D766C7363707975646B6C776B67766877646D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253502.414:14374): pid=82458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253502.416:14375): pid=82458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253502.603:14376): pid=82458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253502.604:14377): pid=82458 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253502.607:14378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253502.607:14379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253502.649:14380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253502.649:14381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253502.706:14382): pid=82476 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253502.706:14383): pid=82476 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74626270636A6A77677A626B736C75646770657A77726E767371666A6C727A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253502.706:14384): pid=82476 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253502.708:14385): pid=82476 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253502.884:14386): pid=82476 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253502.885:14387): pid=82476 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253502.889:14388): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253502.889:14389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253502.931:14390): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253502.931:14391): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253502.962:14392): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253502.962:14393): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253503.066:14394): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253503.066:14395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253503.129:14396): pid=82530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253503.129:14397): pid=82530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7968676E666A6A79676B6B6D74707561647265726C6969666279757A666A7373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253503.130:14398): pid=82530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253503.133:14399): pid=82530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253503.320:14400): pid=82530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253503.321:14401): pid=82530 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253503.324:14402): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253503.324:14403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253503.481:14404): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253503.481:14405): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253503.537:14406): pid=82587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253503.537:14407): pid=82587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7363636574707A647068716A6A70727768627A776A6F7A7866706F78766D6262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253503.538:14408): pid=82587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253503.540:14409): pid=82587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253504.020:14410): pid=82587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253504.021:14411): pid=82587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253504.025:14412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253504.025:14413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253504.416:14414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253504.416:14415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253504.473:14416): pid=82698 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253504.474:14417): pid=82698 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C7868656E7A637A6165697A6E73616B736E7967786E716662777862746167203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253504.474:14418): pid=82698 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253504.477:14419): pid=82698 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253504.712:14420): pid=82698 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253504.712:14421): pid=82698 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253504.717:14422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253504.717:14423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253505.519:14424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253505.519:14425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253505.580:14426): pid=82828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253505.580:14427): pid=82828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62737363797A72646477627367707067616F617A636C6D726A6A7364696B7178203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253505.580:14428): pid=82828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253505.583:14429): pid=82828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253505.652:14430): pid=82289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="fastuser" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253505.788:14431): pid=82828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253505.788:14432): pid=82828 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253505.793:14433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253505.793:14434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253505.945:14435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253505.945:14436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253506.011:14437): pid=82859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253506.011:14438): pid=82859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726867756D716B6C70676366667874706F68707661766377777979796E767677203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253506.012:14439): pid=82859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253506.015:14440): pid=82859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253506.208:14441): pid=82859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253506.208:14442): pid=82859 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253506.212:14443): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253506.212:14444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253506.960:14445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253506.960:14446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253507.013:14447): pid=82899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253507.013:14448): pid=82899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6771716366776E7968797761756D7365627975736D7372697272757164676E71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253507.014:14449): pid=82899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253507.016:14450): pid=82899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253507.190:14451): pid=82899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253507.190:14452): pid=82899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253507.194:14453): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253507.194:14454): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253507.415:14455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253507.415:14456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253507.442:14457): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253507.442:14458): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253507.484:14459): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253507.484:14460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253507.514:14461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253507.514:14462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253507.556:14463): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253507.556:14464): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253507.621:14465): pid=82965 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253507.622:14466): pid=82965 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6372737A69646F7167666761726A6C73776D64786D77777371656C63797A7268203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253507.622:14467): pid=82965 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253507.625:14468): pid=82965 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253507.815:14469): pid=82965 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253507.815:14470): pid=82965 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253507.819:14471): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253507.820:14472): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253507.862:14473): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253507.862:14474): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253507.917:14475): pid=82983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253507.917:14476): pid=82983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787177686B72677667756E737063696A70726B696B6D6A6575797A6E62636478203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253507.917:14477): pid=82983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253507.920:14478): pid=82983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253507.967:14479): pid=82289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=82290 suid=74 rport=51964 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253507.967:14480): pid=82289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=82290 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253507.968:14481): pid=82289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=82289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253507.968:14482): pid=82289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253508.085:14483): pid=82983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253508.085:14484): pid=82983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253508.089:14485): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253508.089:14486): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253508.139:14487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253508.139:14488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253508.169:14489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253508.169:14490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253508.258:14491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253508.258:14492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253508.285:14493): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253508.285:14494): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253508.327:14495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253508.327:14496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253508.363:14497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253508.363:14498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253508.405:14499): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253508.405:14500): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253508.460:14501): pid=83070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253508.461:14502): pid=83070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687964747A6C6D676F647279686767736D6275687775616B61756C6B73617179203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253508.461:14503): pid=83070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253508.463:14504): pid=83070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253508.634:14505): pid=83070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253508.635:14506): pid=83070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253508.638:14507): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253508.638:14508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253508.691:14509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253508.691:14510): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253508.748:14511): pid=83137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253508.748:14512): pid=83137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B72686E69656478727463776978747866636264616A757A62666A6773626B77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253508.749:14513): pid=83137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253508.751:14514): pid=83137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253508.962:14515): pid=83137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253508.962:14516): pid=83137 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253508.965:14517): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253508.965:14518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253509.006:14519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253509.006:14520): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253509.027:14521): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253509.027:14522): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253509.196:14523): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253509.196:14524): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253509.219:14525): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253509.220:14526): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253509.282:14527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253509.282:14528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253509.319:14529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253509.319:14530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253509.367:14531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253509.367:14532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253509.435:14533): pid=83237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253509.436:14534): pid=83237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616D766B65776E667563666E6B67616B696273647664706D79627A7272756875203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253509.437:14535): pid=83237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253509.439:14536): pid=83237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253509.618:14537): pid=83237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253509.618:14538): pid=83237 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253509.621:14539): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253509.621:14540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253509.662:14541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253509.662:14542): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253509.716:14543): pid=83298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253509.717:14544): pid=83298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786361637772746A7366696E796A7474727A6462666A75716474786F686C6F65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253509.717:14545): pid=83298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253509.719:14546): pid=83298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253509.865:14547): pid=83298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253509.866:14548): pid=83298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253509.869:14549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253509.869:14550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253509.912:14551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253509.912:14552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253509.939:14553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253509.939:14554): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253510.072:14555): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253510.072:14556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253510.101:14557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253510.101:14558): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253510.141:14559): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253510.142:14560): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253510.177:14561): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253510.177:14562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253510.218:14563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253510.218:14564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253510.277:14565): pid=83420 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253510.278:14566): pid=83420 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767276677370706C69707A6B71796F6D73747269777666776279716665677571203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253510.279:14567): pid=83420 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253510.282:14568): pid=83420 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253510.480:14569): pid=83420 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253510.481:14570): pid=83420 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253510.483:14571): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253510.483:14572): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253510.525:14573): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253510.525:14574): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253510.574:14575): pid=83454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253510.575:14576): pid=83454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72727262767061716C7267786E776E7563767669776B64707276676A6D637A67203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253510.575:14577): pid=83454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253510.578:14578): pid=83454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253510.744:14579): pid=83454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253510.744:14580): pid=83454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253510.747:14581): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253510.747:14582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253510.789:14583): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253510.789:14584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253510.818:14585): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253510.818:14586): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253510.948:14587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253510.948:14588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253511.009:14589): pid=83533 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253511.009:14590): pid=83533 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756A69636368696E74617876717369726E61676D63776F7A7561657468626C6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253511.009:14591): pid=83533 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253511.011:14592): pid=83533 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253511.563:14593): prog-id=656 op=LOAD
type=BPF msg=audit(1781253511.563:14594): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.563:14595): prog-id=657 op=LOAD
type=BPF msg=audit(1781253511.563:14596): prog-id=658 op=LOAD
type=BPF msg=audit(1781253511.563:14597): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.563:14598): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.567:14599): prog-id=659 op=LOAD
type=BPF msg=audit(1781253511.567:14600): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.567:14601): prog-id=660 op=LOAD
type=BPF msg=audit(1781253511.567:14602): prog-id=661 op=LOAD
type=BPF msg=audit(1781253511.567:14603): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.567:14604): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.571:14605): prog-id=662 op=LOAD
type=BPF msg=audit(1781253511.571:14606): prog-id=663 op=LOAD
type=BPF msg=audit(1781253511.571:14607): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.571:14608): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.573:14609): prog-id=664 op=LOAD
type=BPF msg=audit(1781253511.573:14610): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253511.574:14611): prog-id=665 op=LOAD
type=BPF msg=audit(1781253511.574:14612): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253511.628:14613): pid=83533 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253511.629:14614): pid=83533 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253511.634:14615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253511.634:14616): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253511.773:14617): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253511.774:14618): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253511.802:14619): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253511.802:14620): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253511.847:14621): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253511.847:14622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253511.879:14623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253511.879:14624): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253511.925:14625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253511.925:14626): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253511.989:14627): pid=83753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253511.989:14628): pid=83753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6F786265727876666D636F7369786F746E75656D7968616770626372706277203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253511.990:14629): pid=83753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253511.996:14630): pid=83753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253512.151:14631): pid=83753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253512.151:14632): pid=83753 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253512.156:14633): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253512.156:14634): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253512.199:14635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253512.199:14636): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253512.263:14637): pid=83816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253512.263:14638): pid=83816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63787970687178766D737575686164616679696474637075796266756476746D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253512.264:14639): pid=83816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253512.267:14640): pid=83816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253512.436:14641): pid=83816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253512.436:14642): pid=83816 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253512.440:14643): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253512.440:14644): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253512.481:14645): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253512.481:14646): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253512.509:14647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253512.509:14648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253512.652:14649): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253512.652:14650): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253512.680:14651): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253512.680:14652): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253512.721:14653): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253512.722:14654): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253512.749:14655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253512.749:14656): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253512.790:14657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253512.790:14658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253512.852:14659): pid=83894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253512.852:14660): pid=83894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B646668677975766979647079666769636463616B6D6875717267676A717278203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253512.853:14661): pid=83894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253512.856:14662): pid=83894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253512.872:14663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253513.003:14664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253513.047:14665): pid=83894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253513.047:14666): pid=83894 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253513.051:14667): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253513.051:14668): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253513.098:14669): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253513.098:14670): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253513.162:14671): pid=83945 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253513.162:14672): pid=83945 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66656C7169786577796765706270736A6577746C657A6C677774616877726463203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253513.163:14673): pid=83945 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253513.167:14674): pid=83945 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253513.359:14675): pid=83945 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253513.359:14676): pid=83945 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253513.363:14677): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253513.364:14678): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253513.401:14679): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253513.401:14680): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253513.429:14681): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253513.429:14682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253513.582:14683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253513.583:14684): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253513.639:14685): pid=84032 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253513.640:14686): pid=84032 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74767868656971716562647178656A7268766E6F616161657A73796376737468203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253513.640:14687): pid=84032 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253513.642:14688): pid=84032 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253514.198:14689): prog-id=666 op=LOAD
type=BPF msg=audit(1781253514.198:14690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.198:14691): prog-id=667 op=LOAD
type=BPF msg=audit(1781253514.198:14692): prog-id=668 op=LOAD
type=BPF msg=audit(1781253514.198:14693): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.198:14694): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.202:14695): prog-id=669 op=LOAD
type=BPF msg=audit(1781253514.202:14696): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.202:14697): prog-id=670 op=LOAD
type=BPF msg=audit(1781253514.202:14698): prog-id=671 op=LOAD
type=BPF msg=audit(1781253514.202:14699): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.202:14700): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.205:14701): prog-id=672 op=LOAD
type=BPF msg=audit(1781253514.205:14702): prog-id=673 op=LOAD
type=BPF msg=audit(1781253514.205:14703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.205:14704): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.207:14705): prog-id=674 op=LOAD
type=BPF msg=audit(1781253514.207:14706): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253514.208:14707): prog-id=675 op=LOAD
type=BPF msg=audit(1781253514.208:14708): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253514.314:14709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253514.314:14710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253514.353:14711): pid=84032 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253514.354:14712): pid=84032 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253514.359:14713): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253514.359:14714): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253514.698:14715): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253514.698:14716): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253514.755:14717): pid=84114 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253514.756:14718): pid=84114 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E7A717976626261646462787773676B67656A7063647579776E7873776F77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253514.756:14719): pid=84114 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253514.773:14720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253514.775:14721): pid=84114 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253515.038:14722): pid=84114 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253515.039:14723): pid=84114 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253515.043:14724): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253515.043:14725): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253515.102:14726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253515.412:14727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253515.412:14728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253515.474:14729): pid=84183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253515.475:14730): pid=84183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6B636868616C6A6F6674726671736F68796D6C757165646E6E7A6C6B74656A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253515.475:14731): pid=84183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253515.479:14732): pid=84183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253516.116:14733): pid=84183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253516.117:14734): pid=84183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253516.162:14735): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253516.162:14736): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253516.918:14737): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253516.918:14738): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253516.985:14739): pid=84402 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253516.985:14740): pid=84402 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63636673776C626A6E686A6F6B6E657376646D786C7372706179697065617763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253516.986:14741): pid=84402 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253516.991:14742): pid=84402 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253517.551:14743): prog-id=676 op=LOAD
type=SYSCALL msg=audit(1781253517.551:14743): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcb84e21d0 a2=90 a3=9500000000 items=0 ppid=84664 pid=84665 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.551:14743): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323030623939366161313961333063613832643331373965626534653737
type=BPF msg=audit(1781253517.589:14744): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253517.595:14745): prog-id=677 op=LOAD
type=SYSCALL msg=audit(1781253517.595:14745): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdf1d28030 a2=90 a3=9500000000 items=0 ppid=84677 pid=84678 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.595:14745): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393336313166313036336338643731386466356262663238353330613163
type=BPF msg=audit(1781253517.607:14746): prog-id=678 op=LOAD
type=SYSCALL msg=audit(1781253517.607:14746): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5b7dddd0 a2=90 a3=9500000000 items=0 ppid=84686 pid=84687 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.607:14746): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343035626664363362613039333161396161383462323463633830306431
type=BPF msg=audit(1781253517.620:14747): prog-id=679 op=LOAD
type=SYSCALL msg=audit(1781253517.620:14747): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda41abec0 a2=90 a3=9500000000 items=0 ppid=84700 pid=84702 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.620:14747): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643135646366303830333836323334356332323762313038316566326666
type=BPF msg=audit(1781253517.630:14748): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253517.684:14749): prog-id=680 op=LOAD
type=SYSCALL msg=audit(1781253517.684:14749): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd39748a50 a2=90 a3=9500000000 items=0 ppid=84739 pid=84740 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.684:14749): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346462656330623865386463323033373865633239643630616566373130
type=SERVICE_START msg=audit(1781253517.686:14750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253517.697:14751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253517.718:14752): pid=84759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1781253517.718:14753): pid=84759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1781253517.718:14754): pid=84759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781253517.719:14755): pid=84759 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1781253517.719:14755): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffc03640a30 a2=1 a3=0 items=0 ppid=1 pid=84759 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.719:14755): proctitle="(systemd)"
type=USER_START msg=audit(1781253517.720:14756): pid=84759 uid=0 auid=0 ses=18 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1781253517.731:14757): prog-id=681 op=LOAD
type=SYSCALL msg=audit(1781253517.731:14757): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc01dc8c30 a2=90 a3=0 items=0 ppid=1 pid=84759 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.731:14757): proctitle="(systemd)"
type=BPF msg=audit(1781253517.732:14758): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253517.732:14759): prog-id=682 op=LOAD
type=SYSCALL msg=audit(1781253517.732:14759): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc01dc8cd0 a2=90 a3=4 items=0 ppid=1 pid=84759 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253517.732:14759): proctitle="(systemd)"
type=BPF msg=audit(1781253517.732:14760): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253517.766:14761): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253517.832:14762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253517.863:14763): pid=84839 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c141,c957 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253517.863:14764): pid=84839 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c141,c957 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253517.864:14765): pid=84839 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c141,c957 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253517.865:14766): pid=84839 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c141,c957 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253517.941:14767): pid=84839 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c141,c957 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253517.941:14768): pid=84839 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c141,c957 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253518.014:14769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253518.049:14770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253518.163:14771): prog-id=683 op=LOAD
type=SYSCALL msg=audit(1781253518.163:14771): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffea4d59140 a2=90 a3=9500000000 items=0 ppid=85042 pid=85048 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253518.163:14771): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366266623661363330663635653530303962383961373733383463313166
type=BPF msg=audit(1781253518.250:14772): prog-id=684 op=LOAD
type=SYSCALL msg=audit(1781253518.250:14772): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff758b7d50 a2=90 a3=9500000000 items=0 ppid=85099 pid=85100 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253518.250:14772): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343063373164353461653461303063666334363533626263333266653531
type=BPF msg=audit(1781253518.258:14773): prog-id=685 op=LOAD
type=SYSCALL msg=audit(1781253518.258:14773): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffd7cb9850 a2=90 a3=9500000000 items=0 ppid=85102 pid=85103 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253518.258:14773): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326662316631613438373563643837396365363633326466303239653732
type=USER_ACCT msg=audit(1781253518.280:14774): pid=85117 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c454,c631 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253518.280:14775): pid=85117 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c454,c631 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253518.281:14776): pid=85117 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c454,c631 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253518.281:14777): pid=85117 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c454,c631 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253518.299:14778): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253518.325:14779): pid=85117 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c454,c631 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253518.325:14780): pid=85117 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c454,c631 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253518.365:14781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253518.372:14782): prog-id=686 op=LOAD
type=SYSCALL msg=audit(1781253518.372:14782): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe9f744ef0 a2=90 a3=9500000000 items=0 ppid=85173 pid=85174 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253518.372:14782): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326637383564306265643731663466616665396631353661623330323732
type=BPF msg=audit(1781253518.453:14783): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253518.591:14784): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253518.655:14785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253518.736:14786): prog-id=687 op=LOAD
type=SYSCALL msg=audit(1781253518.736:14786): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd3a5b8ce0 a2=90 a3=9500000000 items=0 ppid=85392 pid=85394 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253518.736:14786): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626533333761396637366133333531653262643436396635613263336638
type=USER_ACCT msg=audit(1781253518.762:14787): pid=85414 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c704,c793 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253518.762:14788): pid=85414 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c704,c793 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253518.763:14789): pid=85414 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c704,c793 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253518.764:14790): pid=85414 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c704,c793 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253518.828:14791): pid=85414 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c704,c793 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253518.828:14792): pid=85414 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c704,c793 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253518.928:14793): prog-id=688 op=LOAD
type=SYSCALL msg=audit(1781253518.928:14793): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd4aacdff0 a2=90 a3=9500000000 items=0 ppid=85473 pid=85474 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253518.928:14793): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396134656631396266623566653634653439343962636532363239633331
type=BPF msg=audit(1781253518.941:14794): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253518.976:14795): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253519.256:14796): prog-id=689 op=LOAD
type=SYSCALL msg=audit(1781253519.256:14796): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe86ebe280 a2=90 a3=9500000000 items=0 ppid=85694 pid=85695 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253519.256:14796): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613363366165373562656366316331613632373231323138303263616665
type=USER_ACCT msg=audit(1781253519.279:14797): pid=85721 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c22,c655 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253519.280:14798): pid=85721 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c22,c655 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253519.280:14799): pid=85721 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c22,c655 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253519.281:14800): pid=85721 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c22,c655 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253519.281:14801): prog-id=690 op=LOAD
type=SYSCALL msg=audit(1781253519.281:14801): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffca5ed3f10 a2=90 a3=9500000000 items=0 ppid=85706 pid=85707 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253519.281:14801): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333763323832393534656338313166646133373639383562346235353532
type=USER_ACCT msg=audit(1781253519.308:14802): pid=85738 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c1,c299 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253519.308:14803): pid=85738 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c1,c299 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253519.308:14804): pid=85738 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c1,c299 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253519.313:14805): pid=85738 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c1,c299 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253519.343:14806): pid=85721 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c22,c655 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253519.343:14807): pid=85721 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c22,c655 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253519.391:14808): pid=85738 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c1,c299 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253519.391:14809): pid=85738 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c1,c299 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253519.400:14810): prog-id=691 op=LOAD
type=SYSCALL msg=audit(1781253519.400:14810): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd8467a440 a2=90 a3=9500000001 items=0 ppid=85756 pid=85757 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253519.400:14810): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613633653065303833643365646564623332313761616362323838303637
type=USER_ACCT msg=audit(1781253519.441:14811): pid=85775 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253519.441:14812): pid=85775 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253519.442:14813): pid=85775 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253519.443:14814): pid=85775 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253519.446:14815): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253519.487:14816): pid=85775 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253519.487:14817): pid=85775 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253519.496:14818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253519.506:14819): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253519.511:14820): prog-id=692 op=LOAD
type=SYSCALL msg=audit(1781253519.511:14820): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc405ba720 a2=90 a3=9500000000 items=0 ppid=85815 pid=85817 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253519.511:14820): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633531613932373938326663616461313266366166353933386338356466
type=BPF msg=audit(1781253519.607:14821): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253519.627:14822): prog-id=693 op=LOAD
type=SYSCALL msg=audit(1781253519.627:14822): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffebd9eaa80 a2=90 a3=9500000000 items=0 ppid=85879 pid=85880 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253519.627:14822): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383533323463303239366366626562303532396434396638623962303865
type=BPF msg=audit(1781253519.677:14823): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253520.678:14824): prog-id=694 op=LOAD
type=SYSCALL msg=audit(1781253520.678:14824): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb5f9ece0 a2=90 a3=9500000000 items=0 ppid=86127 pid=86128 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253520.678:14824): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373466363933613034363334303632323834343734373033653463353266
type=BPF msg=audit(1781253520.687:14825): prog-id=695 op=LOAD
type=SYSCALL msg=audit(1781253520.687:14825): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeee0c9340 a2=90 a3=9500000000 items=0 ppid=86130 pid=86131 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253520.687:14825): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356637323062323731666433333135336563326566376538613433303935
type=USER_ACCT msg=audit(1781253520.705:14826): pid=86135 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c717,c849 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253520.705:14827): pid=86135 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c717,c849 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253520.705:14828): pid=86135 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c717,c849 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253520.706:14829): pid=86135 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c717,c849 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253520.789:14830): pid=86135 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c717,c849 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253520.790:14831): pid=86135 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c717,c849 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253520.913:14832): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253520.924:14833): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253521.543:14834): prog-id=696 op=LOAD
type=SYSCALL msg=audit(1781253521.543:14834): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce880c250 a2=90 a3=9500000000 items=0 ppid=86336 pid=86337 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253521.543:14834): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343061366136396335353635633363633363323339623765316433656466
type=BPF msg=audit(1781253521.600:14835): prog-id=697 op=LOAD
type=SYSCALL msg=audit(1781253521.600:14835): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff98456530 a2=90 a3=9500000001 items=0 ppid=86352 pid=86353 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253521.600:14835): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333432313466613135353037623266383131346135373036653638653133
type=SERVICE_START msg=audit(1781253521.642:14836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253521.652:14837): pid=86367 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253521.653:14838): pid=86367 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253521.653:14839): pid=86367 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253521.676:14840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253521.686:14841): pid=86367 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253521.744:14842): pid=86367 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253521.744:14843): pid=86367 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253521.832:14844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253521.886:14845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253522.269:14846): prog-id=698 op=LOAD
type=SYSCALL msg=audit(1781253522.269:14846): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd1b227e0 a2=90 a3=9500000000 items=0 ppid=86587 pid=86588 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253522.269:14846): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646336666130336436303666353364396234313033303834623132323165
type=USER_ACCT msg=audit(1781253522.296:14847): pid=86597 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c166,c761 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253522.296:14848): pid=86597 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c166,c761 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253522.297:14849): pid=86597 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c166,c761 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253522.298:14850): pid=86597 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c166,c761 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253522.353:14851): pid=86597 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c166,c761 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253522.354:14852): pid=86597 uid=0 auid=1002 ses=16 subj=system_u:system_r:container_t:s0:c166,c761 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253522.463:14853): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253522.967:14854): prog-id=699 op=LOAD
type=SYSCALL msg=audit(1781253522.967:14854): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd1c108550 a2=90 a3=9500000000 items=0 ppid=86762 pid=86763 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253522.967:14854): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366262303864383630313732336166643530316339303331383133303563
type=SERVICE_START msg=audit(1781253523.012:14855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253523.121:14856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253523.186:14857): pid=84402 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253523.187:14858): pid=84402 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253523.190:14859): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253523.190:14860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253523.368:14861): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253523.368:14862): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253523.429:14863): pid=86872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253523.429:14864): pid=86872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71726E6876616F65626A76746A74746B63747866796366656561636A7165746C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253523.431:14865): pid=86872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253523.435:14866): pid=86872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253523.613:14867): pid=86872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253523.614:14868): pid=86872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253523.620:14869): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253523.620:14870): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253523.662:14871): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253523.662:14872): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253523.711:14873): pid=86918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253523.712:14874): pid=86918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676466686E79686373766662677A766E6D6B77717371777775786B7674646A68203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253523.712:14875): pid=86918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253523.715:14876): pid=86918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253523.880:14877): pid=86918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253523.880:14878): pid=86918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253523.883:14879): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253523.883:14880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253523.924:14881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253523.925:14882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253523.983:14883): pid=86981 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253523.983:14884): pid=86981 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6F716661656F706B746C6761646268736B62626B6A6662706B737A68626177203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253523.984:14885): pid=86981 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253523.986:14886): pid=86981 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.167:14887): pid=86981 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253524.167:14888): pid=86981 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.171:14889): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253524.171:14890): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253524.213:14891): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253524.214:14892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253524.270:14893): pid=86997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253524.270:14894): pid=86997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E656A6362646678756D707967656E6671676B75706D70726A796C637A7773203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253524.271:14895): pid=86997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253524.273:14896): pid=86997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.472:14897): pid=86997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253524.472:14898): pid=86997 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.475:14899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253524.475:14900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253524.528:14901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253524.528:14902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253524.570:14903): pid=87028 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253524.570:14904): pid=87028 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A767378726E63666E6E6C76736B76736B72636F746F7A61657266626E6279203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253524.570:14905): pid=87028 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253524.572:14906): pid=87028 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.710:14907): pid=87028 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253524.710:14908): pid=87028 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.713:14909): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253524.713:14910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253524.760:14911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253524.760:14912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253524.803:14913): pid=87060 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253524.804:14914): pid=87060 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627167686770686F706B6661677A687664726F7870646F74667668746D646979203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253524.804:14915): pid=87060 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253524.806:14916): pid=87060 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.954:14917): pid=87060 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253524.954:14918): pid=87060 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253524.958:14919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253524.958:14920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253525.000:14921): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253525.000:14922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253525.057:14923): pid=87125 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253525.057:14924): pid=87125 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7764686D6D6F69736C627677636F717A7170616C6865746266726F797A616974203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253525.058:14925): pid=87125 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253525.061:14926): pid=87125 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253525.229:14927): pid=87125 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253525.230:14928): pid=87125 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253525.233:14929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253525.233:14930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253525.279:14931): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253525.279:14932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253525.336:14933): pid=87141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253525.337:14934): pid=87141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E79686A6A776A78697572627A626D6A736F696874646B6A64786D67656C716D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253525.337:14935): pid=87141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253525.340:14936): pid=87141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253525.515:14937): pid=87141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253525.515:14938): pid=87141 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253525.519:14939): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253525.520:14940): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253525.560:14941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253525.561:14942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253525.623:14943): pid=87172 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253525.624:14944): pid=87172 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C6A7375747371636779776778686776686C726E73617076736F7971656F61203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253525.624:14945): pid=87172 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253525.628:14946): pid=87172 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253525.638:14947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253525.798:14948): pid=87172 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253525.799:14949): pid=87172 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253525.799:14950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253525.802:14951): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253525.802:14952): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253525.846:14953): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253525.846:14954): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253525.901:14955): pid=87339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253525.901:14956): pid=87339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756D6174727968686F706563627A6570717461636B6375696B666E656775796D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253525.902:14957): pid=87339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253525.905:14958): pid=87339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253526.068:14959): pid=87339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253526.068:14960): pid=87339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253526.073:14961): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253526.073:14962): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253526.246:14963): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253526.246:14964): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253526.309:14965): pid=87364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253526.309:14966): pid=87364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C706364656775756D6D6D75636D78706A7169687467627470616572777275203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253526.309:14967): pid=87364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253526.312:14968): pid=87364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253526.449:14969): pid=87364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253526.449:14970): pid=87364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253526.452:14971): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253526.452:14972): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253526.494:14973): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253526.494:14974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253526.535:14975): pid=87427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253526.535:14976): pid=87427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B72716A736961656D667570696979757A647373747075697A64716C77686372203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253526.535:14977): pid=87427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253526.537:14978): pid=87427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253526.698:14979): pid=87427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253526.698:14980): pid=87427 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253526.701:14981): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253526.701:14982): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253526.742:14983): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253526.742:14984): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253526.773:14985): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253526.773:14986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253526.814:14987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253526.815:14988): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253526.851:14989): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253526.851:14990): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253527.043:14991): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253527.043:14992): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253527.081:14993): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253527.081:14994): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253527.123:14995): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253527.123:14996): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253527.186:14997): pid=87505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253527.186:14998): pid=87505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78776271797963706D6B69776E68766269786D7770706764777963716C7A7073203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253527.186:14999): pid=87505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253527.190:15000): pid=87505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253527.382:15001): pid=87505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253527.382:15002): pid=87505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253527.386:15003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253527.386:15004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253527.572:15005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253527.572:15006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253527.611:15007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253527.611:15008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253527.653:15009): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253527.653:15010): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253527.703:15011): pid=87542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253527.703:15012): pid=87542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F64656C756E657767666867696562616A6F67716576666D68666C6669797672203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253527.704:15013): pid=87542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253527.707:15014): pid=87542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253527.872:15015): pid=87542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253527.873:15016): pid=87542 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253527.876:15017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253527.876:15018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253528.054:15019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253528.054:15020): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253528.092:15021): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253528.092:15022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253528.134:15023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253528.134:15024): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253528.195:15025): pid=87587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253528.196:15026): pid=87587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7468716A6F786E7A6F68727A7171766D75786A6671746E6D776461696476726E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253528.196:15027): pid=87587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253528.199:15028): pid=87587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253528.391:15029): pid=87587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253528.391:15030): pid=87587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253528.394:15031): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253528.394:15032): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253528.617:15033): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253528.617:15034): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253528.652:15035): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253528.652:15036): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253528.695:15037): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253528.695:15038): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253528.746:15039): pid=87624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253528.747:15040): pid=87624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A71637563616F646974686E6D6D6C7066646B636F68737A626B7A6762647373203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253528.748:15041): pid=87624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253528.751:15042): pid=87624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253528.908:15043): pid=87624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253528.908:15044): pid=87624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253528.912:15045): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253528.912:15046): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253529.113:15047): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253529.113:15048): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253529.147:15049): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253529.147:15050): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253529.189:15051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253529.189:15052): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253529.236:15053): pid=87669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253529.236:15054): pid=87669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7373706B6273627A6963626D646B6664646763677A6C76636872737461717A67203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253529.237:15055): pid=87669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253529.239:15056): pid=87669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253529.374:15057): pid=87669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253529.375:15058): pid=87669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253529.378:15059): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253529.378:15060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253529.555:15061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253529.555:15062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253529.589:15063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253529.589:15064): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253529.631:15065): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253529.631:15066): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253529.693:15067): pid=87708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253529.693:15068): pid=87708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A79776F6B69666D727671627477627863696E6A697970747A61716978646662203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253529.693:15069): pid=87708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253529.696:15070): pid=87708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253529.880:15071): pid=87708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253529.881:15072): pid=87708 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253529.884:15073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253529.884:15074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253529.934:15075): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253529.934:15076): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253529.987:15077): pid=87740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253529.987:15078): pid=87740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76766662706E627075616462717A676D68766B686A796A76617261656E6B6C6A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253529.987:15079): pid=87740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253529.990:15080): pid=87740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253530.524:15081): prog-id=700 op=LOAD
type=BPF msg=audit(1781253530.524:15082): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.524:15083): prog-id=701 op=LOAD
type=BPF msg=audit(1781253530.524:15084): prog-id=702 op=LOAD
type=BPF msg=audit(1781253530.524:15085): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.524:15086): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.530:15087): prog-id=703 op=LOAD
type=BPF msg=audit(1781253530.530:15088): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.530:15089): prog-id=704 op=LOAD
type=BPF msg=audit(1781253530.530:15090): prog-id=705 op=LOAD
type=BPF msg=audit(1781253530.530:15091): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.530:15092): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.533:15093): prog-id=706 op=LOAD
type=BPF msg=audit(1781253530.533:15094): prog-id=707 op=LOAD
type=BPF msg=audit(1781253530.533:15095): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.533:15096): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.534:15097): prog-id=708 op=LOAD
type=BPF msg=audit(1781253530.534:15098): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253530.536:15099): prog-id=709 op=LOAD
type=BPF msg=audit(1781253530.536:15100): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253530.564:15101): pid=87740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253530.565:15102): pid=87740 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253530.569:15103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253530.570:15104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253531.014:15105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253531.014:15106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253531.081:15107): pid=87817 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253531.081:15108): pid=87817 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7563736E737177616369756E617872617161797078746172647965707077686D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253531.082:15109): pid=87817 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253531.085:15110): pid=87817 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253531.659:15111): prog-id=710 op=LOAD
type=BPF msg=audit(1781253531.659:15112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.659:15113): prog-id=711 op=LOAD
type=BPF msg=audit(1781253531.659:15114): prog-id=712 op=LOAD
type=BPF msg=audit(1781253531.659:15115): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.659:15116): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.664:15117): prog-id=713 op=LOAD
type=BPF msg=audit(1781253531.664:15118): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.664:15119): prog-id=714 op=LOAD
type=BPF msg=audit(1781253531.664:15120): prog-id=715 op=LOAD
type=BPF msg=audit(1781253531.664:15121): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.664:15122): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.667:15123): prog-id=716 op=LOAD
type=BPF msg=audit(1781253531.667:15124): prog-id=717 op=LOAD
type=BPF msg=audit(1781253531.667:15125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.667:15126): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.668:15127): prog-id=718 op=LOAD
type=BPF msg=audit(1781253531.668:15128): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253531.670:15129): prog-id=719 op=LOAD
type=BPF msg=audit(1781253531.670:15130): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253531.771:15131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_collectd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781253531.789:15132): pid=84769 uid=0 auid=0 ses=18 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1781253531.790:15133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253531.809:15134): pid=87817 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253531.810:15135): pid=87817 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253531.814:15136): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253531.814:15137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253531.822:15138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253532.387:15139): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253532.387:15140): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253532.448:15141): pid=87966 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253532.448:15142): pid=87966 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D7A6573787574756469756B6C7A64736765656E6B636F6D6F78736678796F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253532.450:15143): pid=87966 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253532.454:15144): pid=87966 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253533.033:15145): prog-id=720 op=LOAD
type=BPF msg=audit(1781253533.033:15146): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.033:15147): prog-id=721 op=LOAD
type=BPF msg=audit(1781253533.033:15148): prog-id=722 op=LOAD
type=BPF msg=audit(1781253533.033:15149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.033:15150): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.038:15151): prog-id=723 op=LOAD
type=BPF msg=audit(1781253533.038:15152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.038:15153): prog-id=724 op=LOAD
type=BPF msg=audit(1781253533.038:15154): prog-id=725 op=LOAD
type=BPF msg=audit(1781253533.038:15155): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.038:15156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.041:15157): prog-id=726 op=LOAD
type=BPF msg=audit(1781253533.041:15158): prog-id=727 op=LOAD
type=BPF msg=audit(1781253533.041:15159): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.041:15160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.042:15161): prog-id=728 op=LOAD
type=BPF msg=audit(1781253533.042:15162): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253533.043:15163): prog-id=729 op=LOAD
type=BPF msg=audit(1781253533.043:15164): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253533.157:15165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_horizon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253533.190:15166): pid=87966 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253533.190:15167): pid=87966 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253533.195:15168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253533.195:15169): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253533.778:15170): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253533.778:15171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253533.842:15172): pid=88109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253533.843:15173): pid=88109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C666C7A6C6B71697465756A7A61676C6F63786B657A6F76786D667A626870203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253533.843:15174): pid=88109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253533.848:15175): pid=88109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253534.426:15176): prog-id=730 op=LOAD
type=BPF msg=audit(1781253534.426:15177): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.426:15178): prog-id=731 op=LOAD
type=BPF msg=audit(1781253534.426:15179): prog-id=732 op=LOAD
type=BPF msg=audit(1781253534.426:15180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.426:15181): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.431:15182): prog-id=733 op=LOAD
type=BPF msg=audit(1781253534.431:15183): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.431:15184): prog-id=734 op=LOAD
type=BPF msg=audit(1781253534.431:15185): prog-id=735 op=LOAD
type=BPF msg=audit(1781253534.431:15186): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.431:15187): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.434:15188): prog-id=736 op=LOAD
type=BPF msg=audit(1781253534.434:15189): prog-id=737 op=LOAD
type=BPF msg=audit(1781253534.434:15190): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.434:15191): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.435:15192): prog-id=738 op=LOAD
type=BPF msg=audit(1781253534.435:15193): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253534.436:15194): prog-id=739 op=LOAD
type=BPF msg=audit(1781253534.436:15195): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253534.562:15196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253534.584:15197): pid=88109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253534.585:15198): pid=88109 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253534.588:15199): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253534.588:15200): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253535.008:15201): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253535.008:15202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253535.089:15203): pid=88207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253535.089:15204): pid=88207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746479797A6D71767262706D666C78636661717A6773766B766770646268716B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253535.090:15205): pid=88207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253535.096:15206): pid=88207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253535.719:15207): prog-id=740 op=LOAD
type=BPF msg=audit(1781253535.719:15208): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.719:15209): prog-id=741 op=LOAD
type=BPF msg=audit(1781253535.719:15210): prog-id=742 op=LOAD
type=BPF msg=audit(1781253535.719:15211): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.719:15212): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.725:15213): prog-id=743 op=LOAD
type=BPF msg=audit(1781253535.725:15214): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.725:15215): prog-id=744 op=LOAD
type=BPF msg=audit(1781253535.725:15216): prog-id=745 op=LOAD
type=BPF msg=audit(1781253535.725:15217): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.725:15218): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.728:15219): prog-id=746 op=LOAD
type=BPF msg=audit(1781253535.728:15220): prog-id=747 op=LOAD
type=BPF msg=audit(1781253535.728:15221): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.728:15222): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.729:15223): prog-id=748 op=LOAD
type=BPF msg=audit(1781253535.730:15224): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253535.731:15225): prog-id=749 op=LOAD
type=BPF msg=audit(1781253535.731:15226): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253535.839:15227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_keystone comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253535.873:15228): pid=88207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253535.873:15229): pid=88207 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253535.879:15230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253535.879:15231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253536.461:15232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253536.461:15233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253536.530:15234): pid=88405 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253536.530:15235): pid=88405 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7773686B6A6E6D64696E6E71726A69666E777871676C736B796673647175736C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253536.531:15236): pid=88405 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253536.537:15237): pid=88405 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253536.636:15238): pid=88453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=88453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253536.667:15239): pid=88452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88453 suid=74 rport=59748 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253536.668:15240): pid=88452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88453 suid=74 rport=59748 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253536.928:15241): pid=88452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253537.143:15242): prog-id=750 op=LOAD
type=BPF msg=audit(1781253537.143:15243): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.143:15244): prog-id=751 op=LOAD
type=BPF msg=audit(1781253537.143:15245): prog-id=752 op=LOAD
type=BPF msg=audit(1781253537.143:15246): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.143:15247): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.149:15248): prog-id=753 op=LOAD
type=BPF msg=audit(1781253537.150:15249): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.150:15250): prog-id=754 op=LOAD
type=BPF msg=audit(1781253537.150:15251): prog-id=755 op=LOAD
type=BPF msg=audit(1781253537.150:15252): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.150:15253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.153:15254): prog-id=756 op=LOAD
type=BPF msg=audit(1781253537.154:15255): prog-id=757 op=LOAD
type=BPF msg=audit(1781253537.154:15256): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.154:15257): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.156:15258): prog-id=758 op=LOAD
type=BPF msg=audit(1781253537.156:15259): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253537.157:15260): prog-id=759 op=LOAD
type=BPF msg=audit(1781253537.157:15261): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253537.275:15262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_keystone_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253537.305:15263): pid=88405 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253537.305:15264): pid=88405 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253537.311:15265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253537.311:15266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253537.909:15267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253537.909:15268): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253537.976:15269): pid=88613 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253537.976:15270): pid=88613 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776162766E6876666D696D6C6363646A756F6870616677646D6578657A736E7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253537.977:15271): pid=88613 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253537.981:15272): pid=88613 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253538.531:15273): prog-id=760 op=LOAD
type=BPF msg=audit(1781253538.531:15274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.531:15275): prog-id=761 op=LOAD
type=BPF msg=audit(1781253538.531:15276): prog-id=762 op=LOAD
type=BPF msg=audit(1781253538.531:15277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.531:15278): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.536:15279): prog-id=763 op=LOAD
type=BPF msg=audit(1781253538.536:15280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.536:15281): prog-id=764 op=LOAD
type=BPF msg=audit(1781253538.536:15282): prog-id=765 op=LOAD
type=BPF msg=audit(1781253538.536:15283): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.536:15284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.540:15285): prog-id=766 op=LOAD
type=BPF msg=audit(1781253538.540:15286): prog-id=767 op=LOAD
type=BPF msg=audit(1781253538.540:15287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.540:15288): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.541:15289): prog-id=768 op=LOAD
type=BPF msg=audit(1781253538.541:15290): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.542:15291): prog-id=769 op=LOAD
type=BPF msg=audit(1781253538.542:15292): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253538.680:15293): prog-id=770 op=LOAD
type=SYSCALL msg=audit(1781253538.680:15293): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc0df280d0 a2=90 a3=9500000001 items=0 ppid=88690 pid=88691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253538.680:15293): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613633653065303833643365646564623332313761616362323838303637
type=SERVICE_START msg=audit(1781253538.704:15294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253538.708:15295): pid=88701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1781253538.708:15296): pid=88701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1781253538.709:15297): pid=88701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253538.709:15298): pid=88701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253538.734:15299): pid=88613 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253538.734:15300): pid=88613 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253538.738:15301): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253538.738:15302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253538.770:15303): pid=88701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781253538.770:15304): pid=88701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253538.796:15305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253538.796:15306): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1781253538.805:15307): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253538.829:15308): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253538.829:15309): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253538.953:15310): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253538.953:15311): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253538.971:15312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253539.010:15313): pid=88809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253539.010:15314): pid=88809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7772656C6D7A727A686A706166666F636A6A637762696F6A746F6167757A6E64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253539.011:15315): pid=88809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253539.015:15316): pid=88809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253539.160:15317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253539.160:15318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253539.208:15319): pid=88809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253539.208:15320): pid=88809 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253539.211:15321): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253539.211:15322): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1781253539.289:15323): prog-id=771 op=LOAD
type=SYSCALL msg=audit(1781253539.289:15323): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc0b682a40 a2=90 a3=9500000001 items=0 ppid=88846 pid=88847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253539.289:15323): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613633653065303833643365646564623332313761616362323838303637
type=SERVICE_START msg=audit(1781253539.309:15324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253539.314:15325): pid=88852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1781253539.314:15326): pid=88852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1781253539.315:15327): pid=88852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253539.316:15328): pid=88852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253539.366:15329): pid=88852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781253539.367:15330): pid=88852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253539.395:15331): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253539.539:15332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253539.539:15333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253539.539:15334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253539.568:15335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253539.568:15336): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253539.609:15337): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253539.609:15338): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253539.646:15339): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253539.646:15340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253539.659:15341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253539.659:15342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253539.688:15343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253539.688:15344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253539.766:15345): pid=88944 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253539.767:15346): pid=88944 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6972626E6C657761796B6D746F77786D6973616A6769736A7973696769636C76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253539.769:15347): pid=88944 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253539.773:15348): pid=88944 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253539.799:15349): prog-id=772 op=LOAD
type=SYSCALL msg=audit(1781253539.799:15349): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe6c34fee0 a2=90 a3=9500000001 items=0 ppid=88949 pid=88951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253539.799:15349): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613633653065303833643365646564623332313761616362323838303637
type=SERVICE_START msg=audit(1781253539.828:15350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253539.837:15351): pid=88956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1781253539.837:15352): pid=88956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1781253539.838:15353): pid=88956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253539.839:15354): pid=88956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253539.908:15355): pid=88956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781253539.908:15356): pid=88956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253539.939:15357): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253539.965:15358): pid=88944 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253539.966:15359): pid=88944 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253539.970:15360): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253539.970:15361): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253540.010:15362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253540.011:15363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253540.060:15364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253540.060:15365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253540.092:15366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253540.101:15367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253540.101:15368): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253540.133:15369): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253540.133:15370): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253540.175:15371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253540.175:15372): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253540.237:15373): pid=89043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253540.237:15374): pid=89043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77747A6C7966717A67676C6267716E7573796D7062716B63757A736874736E62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253540.238:15375): pid=89043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253540.241:15376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253540.241:15377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253540.244:15378): pid=89043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253540.371:15379): prog-id=773 op=LOAD
type=SYSCALL msg=audit(1781253540.371:15379): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff782372f0 a2=90 a3=9500000001 items=0 ppid=89068 pid=89069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253540.371:15379): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613633653065303833643365646564623332313761616362323838303637
type=SERVICE_START msg=audit(1781253540.407:15380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253540.414:15381): pid=89073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1781253540.415:15382): pid=89073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1781253540.416:15383): pid=89073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253540.417:15384): pid=89073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253540.476:15385): pid=89043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253540.476:15386): pid=89043 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253540.480:15387): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253540.480:15388): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253540.491:15389): pid=89073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781253540.491:15390): pid=89073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253540.522:15391): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253540.522:15392): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1781253540.524:15393): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253540.551:15394): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253540.551:15395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253540.592:15396): pid=88452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88453 suid=74 rport=59748 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253540.593:15397): pid=88452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=88453 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253540.594:15398): pid=88452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=88452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253540.594:15399): pid=88452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253540.681:15400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253540.681:15401): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253540.687:15402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253540.745:15403): pid=89129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253540.745:15404): pid=89129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6467786F6A7862726B79696E716D676C63636579646665726C666F6264716F74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253540.746:15405): pid=89129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253540.749:15406): pid=89129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253540.909:15407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253540.909:15408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253540.937:15409): pid=89129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253540.938:15410): pid=89129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253540.941:15411): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253540.941:15412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1781253541.027:15413): prog-id=774 op=LOAD
type=SYSCALL msg=audit(1781253541.027:15413): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdf28332c0 a2=90 a3=9500000001 items=0 ppid=89154 pid=89155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253541.027:15413): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613633653065303833643365646564623332313761616362323838303637
type=SERVICE_START msg=audit(1781253541.054:15414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253541.065:15415): pid=89159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1781253541.065:15416): pid=89159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1781253541.066:15417): pid=89159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253541.067:15418): pid=89159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253541.125:15419): pid=89159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781253541.125:15420): pid=89159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253541.160:15421): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253541.349:15422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253541.459:15423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253541.459:15424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253541.526:15425): pid=89219 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253541.526:15426): pid=89219 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A62687A716D656F73716D6C616E78716D6D6A6B6E6861697275676262637A6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253541.527:15427): pid=89219 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253541.530:15428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253541.530:15429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253541.532:15430): pid=89219 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253541.725:15431): pid=89219 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253541.725:15432): pid=89219 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253541.729:15433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253541.729:15434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253541.884:15435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253541.884:15436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253541.927:15437): pid=89242 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253541.928:15438): pid=89242 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A766871766A6264796E786C7475746B6A6E7469617574716872786B776B656D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253541.928:15439): pid=89242 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253541.930:15440): pid=89242 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253542.124:15441): pid=89242 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253542.124:15442): pid=89242 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253542.129:15443): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253542.129:15444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253543.173:15445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253543.251:15446): pid=89297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=89297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781253543.278:15447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253543.512:15448): pid=89290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89297 suid=74 rport=55602 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253543.512:15449): pid=89290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89297 suid=74 rport=55602 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253545.170:15450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253545.512:15451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253548.172:15452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253548.325:15453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253549.171:15454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253549.327:15455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253552.170:15456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253552.174:15457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253552.367:15458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253552.412:15459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253553.175:15460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253553.296:15461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253556.171:15462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253556.395:15463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253557.848:15464): pid=90278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=90278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253557.982:15465): pid=90277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90278 suid=74 rport=40490 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253557.982:15466): pid=90277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90278 suid=74 rport=40490 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253558.626:15467): pid=90277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="username" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253560.815:15468): pid=90277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90278 suid=74 rport=40490 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253560.816:15469): pid=90277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=90278 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253560.817:15470): pid=90277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=90277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253560.817:15471): pid=90277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253574.175:15472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253574.338:15473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253576.181:15474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253576.542:15475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253579.177:15476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253579.311:15477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253580.176:15478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253580.341:15479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253582.086:15480): pid=91739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=91739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253582.184:15481): pid=91738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91739 suid=74 rport=37066 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253582.185:15482): pid=91738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91739 suid=74 rport=37066 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253582.700:15483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253582.703:15484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253582.707:15485): pid=91738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pos" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253582.822:15486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253583.001:15487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253584.168:15488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253584.334:15489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253584.804:15490): pid=91738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91739 suid=74 rport=37066 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253584.804:15491): pid=91738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=91739 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253584.805:15492): pid=91738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=91738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253584.805:15493): pid=91738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253587.175:15494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253587.317:15495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253594.541:15496): pid=92486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253594.796:15497): pid=92478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92486 suid=74 rport=42296 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253594.796:15498): pid=92478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92486 suid=74 rport=42296 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253595.929:15499): pid=92478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="monitoring" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253595.982:15500): pid=92583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253596.209:15501): pid=92581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92583 suid=74 rport=56624 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253596.210:15502): pid=92581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92583 suid=74 rport=56624 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253597.316:15503): pid=92773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92773 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253597.445:15504): pid=92772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=92773 suid=74 rport=52392 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253597.445:15505): pid=92772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=92773 suid=74 rport=52392 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253598.075:15506): pid=92581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253598.095:15507): pid=92772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253599.138:15508): pid=92478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92486 suid=74 rport=42296 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253599.139:15509): pid=92478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92486 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253599.141:15510): pid=92478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253599.141:15511): pid=92478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253601.863:15512): pid=92772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92773 suid=74 rport=52392 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253601.863:15513): pid=92772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92773 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253601.865:15514): pid=92772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253601.865:15515): pid=92772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253601.901:15516): pid=92581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92583 suid=74 rport=56624 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253601.902:15517): pid=92581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92583 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253601.902:15518): pid=92581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=92581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253601.902:15519): pid=92581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253605.182:15520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253605.335:15521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253607.171:15522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253607.487:15523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253610.169:15524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253610.280:15525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253611.171:15526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253611.326:15527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253613.169:15528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253613.172:15529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253613.289:15530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253613.421:15531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253615.180:15532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253615.296:15533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253618.171:15534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253618.372:15535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253636.173:15536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253636.306:15537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253638.179:15538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253638.483:15539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253641.181:15540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253641.331:15541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253641.343:15542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253641.499:15543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253644.172:15544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253644.176:15545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253644.345:15546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253644.370:15547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253646.178:15548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253646.315:15549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253649.172:15550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253649.328:15551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253649.448:15552): pid=95868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=95868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253649.567:15553): pid=95867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=95868 suid=74 rport=43882 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253649.567:15554): pid=95867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=95868 suid=74 rport=43882 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253650.151:15555): pid=95867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="teamspeak" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253653.450:15556): pid=95867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95868 suid=74 rport=43882 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253653.450:15557): pid=95867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=95868 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253653.451:15558): pid=95867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=95867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253653.451:15559): pid=95867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253665.743:15560): pid=96781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=96781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253665.775:15561): pid=96777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=96781 suid=74 rport=32914 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253665.775:15562): pid=96777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=96781 suid=74 rport=32914 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253666.017:15563): pid=96777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="access" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253667.187:15564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253667.303:15565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253669.169:15566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253669.479:15567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253669.534:15568): pid=96777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=96781 suid=74 rport=32914 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253669.535:15569): pid=96777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=96781 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253669.536:15570): pid=96777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=96777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253669.536:15571): pid=96777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253672.174:15572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253672.179:15573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253672.340:15574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253672.362:15575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253675.180:15576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253675.184:15577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253675.362:15578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253675.376:15579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253677.173:15580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253677.311:15581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253680.171:15582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253680.335:15583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253698.181:15584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253698.348:15585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253698.627:15586): pid=98986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=98986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253698.751:15587): pid=98985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=98986 suid=74 rport=49774 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253698.751:15588): pid=98985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=98986 suid=74 rport=49774 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253699.381:15589): pid=98985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253700.170:15590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253700.471:15591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253703.136:15592): pid=98985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98986 suid=74 rport=49774 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253703.136:15593): pid=98985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=98986 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253703.137:15594): pid=98985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=98985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253703.137:15595): pid=98985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253703.164:15596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253703.168:15597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253703.342:15598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253703.374:15599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253706.180:15600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253706.183:15601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253706.352:15602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253706.413:15603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253708.118:15604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253708.241:15605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253711.171:15606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253711.316:15607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253717.529:15608): pid=100067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=100067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253717.626:15609): pid=100066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=100067 suid=74 rport=47930 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253717.626:15610): pid=100066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=100067 suid=74 rport=47930 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253717.993:15611): pid=100138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=100138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_AUTH msg=audit(1781253718.140:15612): pid=100066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="yoo" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253718.250:15613): pid=100137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=100138 suid=74 rport=45062 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253718.250:15614): pid=100137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=100138 suid=74 rport=45062 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253719.405:15615): pid=100137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253721.292:15616): pid=100066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100067 suid=74 rport=47930 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253721.292:15617): pid=100066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=100067 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253721.293:15618): pid=100066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=100066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253721.294:15619): pid=100066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253721.460:15620): pid=100137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100138 suid=74 rport=45062 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253721.461:15621): pid=100137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=100138 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253721.462:15622): pid=100137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=100137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253721.462:15623): pid=100137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253729.171:15624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253729.348:15625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253731.168:15626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253731.457:15627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253734.171:15628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253734.175:15629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253734.365:15630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253734.419:15631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253737.171:15632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253737.173:15633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253737.256:15634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253737.343:15635): pid=101195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=101195 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781253737.377:15636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253737.461:15637): pid=101191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=101195 suid=74 rport=47270 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253737.461:15638): pid=101191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=101195 suid=74 rport=47270 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253738.066:15639): pid=101191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253738.788:15640): pid=101344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=101344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253738.998:15641): pid=101343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=101344 suid=74 rport=41030 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253738.998:15642): pid=101343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=101344 suid=74 rport=41030 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253739.181:15643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253739.296:15644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253739.945:15645): pid=101343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="download" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253739.981:15646): pid=101191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101195 suid=74 rport=47270 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253739.981:15647): pid=101191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=101195 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253739.982:15648): pid=101191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=101191 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253739.982:15649): pid=101191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253741.806:15650): pid=101343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101344 suid=74 rport=41030 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253741.807:15651): pid=101343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=101344 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253741.809:15652): pid=101343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=101343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253741.809:15653): pid=101343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253741.829:15654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253742.008:15655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253757.039:15656): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253757.040:15657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253757.074:15658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253757.075:15659): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253757.115:15660): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253757.115:15661): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253757.144:15662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253757.144:15663): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253757.186:15664): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253757.186:15665): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253757.251:15666): pid=102565 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253757.251:15667): pid=102565 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B70756C6B6179776E77637466736D646F72666967696873707874786166756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253757.252:15668): pid=102565 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253757.255:15669): pid=102565 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253757.428:15670): pid=102565 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253757.428:15671): pid=102565 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253757.433:15672): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253757.433:15673): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253757.473:15674): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253757.474:15675): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253757.513:15676): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253757.513:15677): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253757.557:15678): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253757.557:15679): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253757.590:15680): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253757.590:15681): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253757.632:15682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253757.632:15683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253757.692:15684): pid=102618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253757.692:15685): pid=102618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D7971707A6966667A65616D69696471666661727670786F6D76796A64686F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253757.693:15686): pid=102618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253757.695:15687): pid=102618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253757.879:15688): pid=102618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253757.880:15689): pid=102618 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253757.885:15690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253757.885:15691): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253757.930:15692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253757.930:15693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253757.964:15694): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253757.964:15695): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253759.013:15696): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253759.013:15697): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253759.071:15698): pid=102733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253759.072:15699): pid=102733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E757264616A777063786A7A657777677861696678667572686B7165637066203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253759.072:15700): pid=102733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253759.074:15701): pid=102733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253759.219:15702): pid=102733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253759.219:15703): pid=102733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253759.222:15704): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253759.222:15705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253759.504:15706): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253759.504:15707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253759.553:15708): pid=102757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253759.554:15709): pid=102757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F627479626B677972646473786264697861737978776F70626C7968737072203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253759.554:15710): pid=102757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253759.558:15711): pid=102757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253759.567:15712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253759.701:15713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253759.730:15714): pid=102757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253759.730:15715): pid=102757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253759.734:15716): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253759.734:15717): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253760.327:15718): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253760.327:15719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253760.388:15720): pid=102820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253760.388:15721): pid=102820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74737176637466736B6F6F7066746E73676E74736F746F6C756B746B726F716D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253760.389:15722): pid=102820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253760.391:15723): pid=102820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253761.053:15724): pid=102820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253761.053:15725): pid=102820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253761.059:15726): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253761.059:15727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253762.171:15728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253762.477:15729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253762.651:15730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253762.651:15731): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253762.718:15732): pid=102943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253762.718:15733): pid=102943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68676A766E786E7572686C6E716A7972686A6F6E67776B6E6465676961796E69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253762.721:15734): pid=102943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253762.725:15735): pid=102943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253763.333:15736): prog-id=775 op=LOAD
type=SYSCALL msg=audit(1781253763.333:15736): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffefbef06e0 a2=90 a3=9500000000 items=0 ppid=103020 pid=103021 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253763.333:15736): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343165363331316333376265646630636132303763636139616532393363
type=USER_END msg=audit(1781253763.549:15737): pid=102943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253763.550:15738): pid=102943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253763.554:15739): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253763.554:15740): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253763.765:15741): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253763.765:15742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253763.835:15743): pid=103183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253763.836:15744): pid=103183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6278637168686874717A7261616D6A61687578616D7A6B6E657377686D746B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253763.838:15745): pid=103183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253763.843:15746): pid=103183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253764.039:15747): pid=103183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253764.039:15748): pid=103183 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253764.043:15749): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253764.043:15750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253764.083:15751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253764.083:15752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253764.152:15753): pid=103208 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253764.153:15754): pid=103208 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A7176667365767A776970726D64716C7A7774797361707063767972766C79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253764.153:15755): pid=103208 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253764.156:15756): pid=103208 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253764.367:15757): pid=103208 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253764.367:15758): pid=103208 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253764.371:15759): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253764.371:15760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253764.412:15761): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253764.412:15762): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253764.446:15763): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253764.446:15764): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253764.488:15765): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253764.488:15766): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253764.521:15767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253764.521:15768): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253764.746:15769): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253764.746:15770): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253764.770:15771): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253764.770:15772): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253764.811:15773): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253764.811:15774): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253764.846:15775): pid=103375 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253764.846:15776): pid=103375 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74706E75677A62727963666177707A79687A667A6463786C76676A746F6A6979203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253764.847:15777): pid=103375 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253764.849:15778): pid=103375 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253764.862:15779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253764.865:15780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253764.980:15781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253764.997:15782): pid=103375 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253764.997:15783): pid=103375 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253765.000:15784): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253765.000:15785): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253765.040:15786): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253765.040:15787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253765.101:15788): pid=103433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253765.101:15789): pid=103433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71796B6D7376646B627570797979727870676870667468637068717868717467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253765.102:15790): pid=103433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253765.105:15791): pid=103433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253765.138:15792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253765.584:15793): prog-id=776 op=LOAD
type=BPF msg=audit(1781253765.584:15794): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.584:15795): prog-id=777 op=LOAD
type=BPF msg=audit(1781253765.584:15796): prog-id=778 op=LOAD
type=BPF msg=audit(1781253765.584:15797): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.584:15798): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.590:15799): prog-id=779 op=LOAD
type=BPF msg=audit(1781253765.590:15800): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.590:15801): prog-id=780 op=LOAD
type=BPF msg=audit(1781253765.590:15802): prog-id=781 op=LOAD
type=BPF msg=audit(1781253765.590:15803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.590:15804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.593:15805): prog-id=782 op=LOAD
type=BPF msg=audit(1781253765.593:15806): prog-id=783 op=LOAD
type=BPF msg=audit(1781253765.593:15807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.593:15808): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.595:15809): prog-id=784 op=LOAD
type=BPF msg=audit(1781253765.595:15810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253765.596:15811): prog-id=785 op=LOAD
type=BPF msg=audit(1781253765.596:15812): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253765.640:15813): pid=103433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253765.641:15814): pid=103433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253765.646:15815): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253765.646:15816): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253766.343:15817): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253766.343:15818): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253766.404:15819): pid=103589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253766.405:15820): pid=103589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6376666F63776B6E74626B6C636868747A64776D6167626C69646164766B6D62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253766.405:15821): pid=103589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253766.410:15822): pid=103589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253767.012:15823): prog-id=786 op=LOAD
type=BPF msg=audit(1781253767.012:15824): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.012:15825): prog-id=787 op=LOAD
type=BPF msg=audit(1781253767.012:15826): prog-id=788 op=LOAD
type=BPF msg=audit(1781253767.012:15827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.012:15828): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.017:15829): prog-id=789 op=LOAD
type=BPF msg=audit(1781253767.017:15830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.017:15831): prog-id=790 op=LOAD
type=BPF msg=audit(1781253767.018:15832): prog-id=791 op=LOAD
type=BPF msg=audit(1781253767.018:15833): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.018:15834): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.021:15835): prog-id=792 op=LOAD
type=BPF msg=audit(1781253767.021:15836): prog-id=793 op=LOAD
type=BPF msg=audit(1781253767.021:15837): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.021:15838): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.023:15839): prog-id=794 op=LOAD
type=BPF msg=audit(1781253767.023:15840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253767.024:15841): prog-id=795 op=LOAD
type=BPF msg=audit(1781253767.024:15842): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253767.117:15843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_north_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253767.144:15844): pid=103589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253767.144:15845): pid=103589 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253767.148:15846): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253767.148:15847): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253767.219:15848): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253767.219:15849): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253767.247:15850): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253767.247:15851): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253767.530:15852): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253767.530:15853): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253767.585:15854): pid=103793 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253767.586:15855): pid=103793 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78766779786F7378667577747272726E636971676D7973636C796F6E6D667378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253767.587:15856): pid=103793 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253767.595:15857): pid=103793 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253767.608:15858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253767.612:15859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253767.744:15860): pid=103793 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253767.744:15861): pid=103793 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253767.759:15862): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253767.759:15863): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253767.789:15864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253767.825:15865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253767.934:15866): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253767.935:15867): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253767.989:15868): pid=103863 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253767.989:15869): pid=103863 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E7471706E696B736A7A616E6B6164766A62786463667275616B6670667576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253767.991:15870): pid=103863 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253767.995:15871): pid=103863 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253768.240:15872): pid=103863 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253768.240:15873): pid=103863 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253768.245:15874): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253768.245:15875): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253768.922:15876): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253768.922:15877): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253768.986:15878): pid=103960 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253768.986:15879): pid=103960 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626972726F6B65736B656F6A626676686A6770657264736B626B6D65716E6B71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253768.988:15880): pid=103960 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253768.992:15881): pid=103960 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253769.652:15882): pid=103960 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253769.653:15883): pid=103960 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253769.698:15884): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253769.698:15885): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253770.176:15886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253770.285:15887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253771.397:15888): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253771.397:15889): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253771.499:15890): pid=104087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253771.499:15891): pid=104087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B6B6C7773786C706A736A6567717461786268636D62726F687A68617A6773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253771.500:15892): pid=104087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253771.504:15893): pid=104087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253772.076:15894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253772.113:15895): prog-id=796 op=LOAD
type=SYSCALL msg=audit(1781253772.113:15895): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff98ec7770 a2=90 a3=9500000000 items=0 ppid=104157 pid=104159 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253772.113:15895): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326231373364643631386561353435386133316130353764303162343033
type=SERVICE_STOP msg=audit(1781253772.268:15896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253772.408:15897): pid=104087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253772.408:15898): pid=104087 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253772.414:15899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253772.414:15900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253772.591:15901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253772.591:15902): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253772.637:15903): pid=104360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253772.637:15904): pid=104360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B6C61686770756D64647768777175736D79736C7A71676F63707579766E73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253772.637:15905): pid=104360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253772.640:15906): pid=104360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253772.830:15907): pid=104360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253772.830:15908): pid=104360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253772.833:15909): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253772.833:15910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253772.875:15911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253772.875:15912): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253772.930:15913): pid=104434 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253772.930:15914): pid=104434 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70637471706F75626E776C7A6178796E757A71696672646F6F636E7878687A67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253772.931:15915): pid=104434 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253772.933:15916): pid=104434 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253773.097:15917): pid=104434 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253773.097:15918): pid=104434 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253773.100:15919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253773.100:15920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253773.142:15921): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253773.142:15922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253773.163:15923): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253773.163:15924): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253773.204:15925): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253773.204:15926): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253773.234:15927): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253773.234:15928): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253773.446:15929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253773.446:15930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253773.484:15931): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253773.484:15932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253773.528:15933): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253773.528:15934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253773.582:15935): pid=104522 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253773.583:15936): pid=104522 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707478737A6E797676736D79737473626964776E6D747476676972757A626164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253773.583:15937): pid=104522 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253773.585:15938): pid=104522 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253773.784:15939): pid=104522 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253773.784:15940): pid=104522 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253773.787:15941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253773.787:15942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253773.833:15943): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253773.833:15944): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253773.890:15945): pid=104538 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253773.890:15946): pid=104538 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7477796D736874777A6263756968726D767A6F616E757A687978657068736B74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253773.890:15947): pid=104538 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253773.893:15948): pid=104538 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253774.463:15949): prog-id=797 op=LOAD
type=BPF msg=audit(1781253774.463:15950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.463:15951): prog-id=798 op=LOAD
type=BPF msg=audit(1781253774.463:15952): prog-id=799 op=LOAD
type=BPF msg=audit(1781253774.463:15953): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.463:15954): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.468:15955): prog-id=800 op=LOAD
type=BPF msg=audit(1781253774.468:15956): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.468:15957): prog-id=801 op=LOAD
type=BPF msg=audit(1781253774.468:15958): prog-id=802 op=LOAD
type=BPF msg=audit(1781253774.468:15959): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.468:15960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.472:15961): prog-id=803 op=LOAD
type=BPF msg=audit(1781253774.472:15962): prog-id=804 op=LOAD
type=BPF msg=audit(1781253774.472:15963): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.472:15964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.473:15965): prog-id=805 op=LOAD
type=BPF msg=audit(1781253774.473:15966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253774.474:15967): prog-id=806 op=LOAD
type=BPF msg=audit(1781253774.474:15968): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253774.507:15969): pid=104538 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253774.507:15970): pid=104538 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253774.511:15971): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253774.512:15972): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253774.956:15973): pid=104624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=104624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253775.188:15974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253775.188:15975): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253775.237:15976): pid=104664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253775.237:15977): pid=104664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A766E79746B7863677A6E71646E68737A6772746F6C72707166716467617A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253775.238:15978): pid=104664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253775.242:15979): pid=104664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253775.836:15980): prog-id=807 op=LOAD
type=BPF msg=audit(1781253775.836:15981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.836:15982): prog-id=808 op=LOAD
type=BPF msg=audit(1781253775.836:15983): prog-id=809 op=LOAD
type=BPF msg=audit(1781253775.836:15984): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.836:15985): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.842:15986): prog-id=810 op=LOAD
type=BPF msg=audit(1781253775.842:15987): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.842:15988): prog-id=811 op=LOAD
type=BPF msg=audit(1781253775.842:15989): prog-id=812 op=LOAD
type=BPF msg=audit(1781253775.842:15990): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.842:15991): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.845:15992): prog-id=813 op=LOAD
type=BPF msg=audit(1781253775.845:15993): prog-id=814 op=LOAD
type=BPF msg=audit(1781253775.845:15994): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.845:15995): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.847:15996): prog-id=815 op=LOAD
type=BPF msg=audit(1781253775.847:15997): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253775.848:15998): prog-id=816 op=LOAD
type=BPF msg=audit(1781253775.848:15999): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253775.940:16000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_south_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253775.961:16001): pid=104664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253775.962:16002): pid=104664 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253775.965:16003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253775.965:16004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253776.010:16005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253776.010:16006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253776.032:16007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253776.032:16008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253776.309:16009): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253776.309:16010): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253776.372:16011): pid=104770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253776.373:16012): pid=104770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70716562626C6F6F767A7A71776C6B66637364736C67777576636A6573626C7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253776.373:16013): pid=104770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253776.380:16014): pid=104770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253776.483:16015): pid=104782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=104782 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781253776.567:16016): pid=104770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253776.567:16017): pid=104770 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253776.570:16018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253776.570:16019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781253776.690:16020): pid=104781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=104782 suid=74 rport=35070 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253776.691:16021): pid=104781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=104782 suid=74 rport=35070 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253776.735:16022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253776.735:16023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253776.784:16024): pid=104804 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253776.784:16025): pid=104804 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6478716D6E6B7876726F66727867787479686A707064686568616C7471656564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253776.785:16026): pid=104804 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253776.788:16027): pid=104804 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253776.982:16028): pid=104804 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253776.982:16029): pid=104804 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253776.986:16030): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253776.986:16031): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253777.612:16032): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253777.612:16033): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253777.635:16034): pid=104781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="harsha" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253777.662:16035): pid=104885 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253777.662:16036): pid=104885 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A75637A666470686E706D726E6D6B63686B77667A6871707A6E616D70756D71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253777.663:16037): pid=104885 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253777.665:16038): pid=104885 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253778.147:16039): pid=104885 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253778.148:16040): pid=104885 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253778.151:16041): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253778.151:16042): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253779.288:16043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253779.288:16044): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253779.344:16045): pid=105065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253779.345:16046): pid=105065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70787065757A766D6E7A647A637A686C6465676F687561716F61706D736B716C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253779.347:16047): pid=105065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253779.351:16048): pid=105065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253780.012:16049): prog-id=817 op=LOAD
type=SYSCALL msg=audit(1781253780.012:16049): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5528c010 a2=90 a3=9500000000 items=0 ppid=105157 pid=105159 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253780.012:16049): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663135366565383436656333396465633030656537373031646463363334
type=SERVICE_START msg=audit(1781253780.106:16050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253780.183:16051): pid=104781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=104782 suid=74 rport=35070 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253780.183:16052): pid=104781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=104782 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253780.185:16053): pid=104781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=104781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253780.185:16054): pid=104781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253780.212:16055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253780.368:16056): pid=105065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253780.369:16057): pid=105065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253780.376:16058): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253780.376:16059): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253780.538:16060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253780.538:16061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253780.600:16062): pid=105272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253780.600:16063): pid=105272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766770746B63676E6A6D726E79757877696272696F657664736D6B6D64716E6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253780.601:16064): pid=105272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253780.606:16065): pid=105272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253780.779:16066): pid=105272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253780.779:16067): pid=105272 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253780.782:16068): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253780.782:16069): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253780.823:16070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253780.824:16071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253780.875:16072): pid=105312 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253780.876:16073): pid=105312 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70657A65626971746B62686A7978697873777370627479646E6E657563667461203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253780.877:16074): pid=105312 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253780.881:16075): pid=105312 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253781.028:16076): pid=105312 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253781.028:16077): pid=105312 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253781.031:16078): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253781.031:16079): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253781.074:16080): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253781.074:16081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253781.103:16082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253781.103:16083): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253781.145:16084): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253781.146:16085): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253781.183:16086): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253781.184:16087): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253781.391:16088): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253781.391:16089): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253781.426:16090): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253781.426:16091): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253781.468:16092): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253781.468:16093): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253781.537:16094): pid=105430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253781.537:16095): pid=105430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7172687675736E677166776C6F69686575656A75696678696267787770756364203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253781.538:16096): pid=105430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253781.540:16097): pid=105430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253781.724:16098): pid=105430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253781.724:16099): pid=105430 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253781.728:16100): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253781.728:16101): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253781.769:16102): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253781.769:16103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253781.827:16104): pid=105464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253781.827:16105): pid=105464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E6F79646C646B66736C6863646876736D73786D7A67706779707372626B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253781.828:16106): pid=105464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253781.830:16107): pid=105464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253782.335:16108): prog-id=818 op=LOAD
type=BPF msg=audit(1781253782.335:16109): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.335:16110): prog-id=819 op=LOAD
type=BPF msg=audit(1781253782.335:16111): prog-id=820 op=LOAD
type=BPF msg=audit(1781253782.335:16112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.335:16113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.341:16114): prog-id=821 op=LOAD
type=BPF msg=audit(1781253782.341:16115): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.341:16116): prog-id=822 op=LOAD
type=BPF msg=audit(1781253782.341:16117): prog-id=823 op=LOAD
type=BPF msg=audit(1781253782.341:16118): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.341:16119): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.345:16120): prog-id=824 op=LOAD
type=BPF msg=audit(1781253782.345:16121): prog-id=825 op=LOAD
type=BPF msg=audit(1781253782.345:16122): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.345:16123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.347:16124): prog-id=826 op=LOAD
type=BPF msg=audit(1781253782.347:16125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253782.348:16126): prog-id=827 op=LOAD
type=BPF msg=audit(1781253782.348:16127): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253782.373:16128): pid=105464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253782.373:16129): pid=105464 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253782.377:16130): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253782.377:16131): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253783.025:16132): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253783.025:16133): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253783.085:16134): pid=105549 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253783.085:16135): pid=105549 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716A766278776C7677706265746E61666A79766B79776B636E78667474746462203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253783.086:16136): pid=105549 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253783.090:16137): pid=105549 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253783.627:16138): prog-id=828 op=LOAD
type=BPF msg=audit(1781253783.627:16139): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.627:16140): prog-id=829 op=LOAD
type=BPF msg=audit(1781253783.627:16141): prog-id=830 op=LOAD
type=BPF msg=audit(1781253783.627:16142): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.627:16143): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.633:16144): prog-id=831 op=LOAD
type=BPF msg=audit(1781253783.633:16145): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.633:16146): prog-id=832 op=LOAD
type=BPF msg=audit(1781253783.633:16147): prog-id=833 op=LOAD
type=BPF msg=audit(1781253783.633:16148): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.633:16149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.637:16150): prog-id=834 op=LOAD
type=BPF msg=audit(1781253783.637:16151): prog-id=835 op=LOAD
type=BPF msg=audit(1781253783.637:16152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.637:16153): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.638:16154): prog-id=836 op=LOAD
type=BPF msg=audit(1781253783.638:16155): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253783.639:16156): prog-id=837 op=LOAD
type=BPF msg=audit(1781253783.640:16157): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253783.746:16158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_northd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253783.774:16159): pid=105549 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253783.775:16160): pid=105549 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253783.780:16161): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253783.780:16162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253783.830:16163): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253783.830:16164): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253783.862:16165): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253783.862:16166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253784.164:16167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253784.164:16168): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253784.219:16169): pid=105651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253784.221:16170): pid=105651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A636E65696F656C6D737663787369797A74706F6A786C6974747773626F7A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253784.222:16171): pid=105651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253784.227:16172): pid=105651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253784.380:16173): pid=105651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253784.380:16174): pid=105651 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253784.385:16175): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253784.385:16176): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253784.638:16177): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253784.638:16178): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253784.671:16179): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253784.671:16180): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253784.712:16181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253784.712:16182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253784.745:16183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253784.745:16184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253784.787:16185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253784.787:16186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253784.852:16187): pid=105725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253784.852:16188): pid=105725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65786F66667A7569717376736E77697265617579716B67646B6E73736F6A6A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253784.853:16189): pid=105725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253784.857:16190): pid=105725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253785.047:16191): pid=105725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253785.048:16192): pid=105725 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253785.053:16193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.053:16194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.094:16195): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.094:16196): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253785.161:16197): pid=105787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253785.161:16198): pid=105787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786B6B6A796C766B6E627475677A6E777A6F68746C6B656E776770767073656C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253785.161:16199): pid=105787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253785.165:16200): pid=105787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253785.373:16201): pid=105787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253785.373:16202): pid=105787 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253785.377:16203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.377:16204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.422:16205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.422:16206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253785.457:16207): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.457:16208): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.582:16209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.584:16210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253785.606:16211): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.606:16212): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.648:16213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.648:16214): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253785.681:16215): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.681:16216): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.723:16217): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.723:16218): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253785.756:16219): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.756:16220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.799:16221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.799:16222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253785.833:16223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.833:16224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.874:16225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.874:16226): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253785.897:16227): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253785.898:16228): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253785.939:16229): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253785.940:16230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253785.992:16231): pid=105915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253785.992:16232): pid=105915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253785.992:16233): pid=105915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253785.994:16234): pid=105915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253786.157:16235): pid=105915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253786.157:16236): pid=105915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253786.160:16237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253786.160:16238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253786.317:16239): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253786.317:16240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253786.367:16241): pid=105939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253786.368:16242): pid=105939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A657778737563716C7876797A677A6C6E71697968706B7A6B686A6E6E727A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253786.368:16243): pid=105939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253786.370:16244): pid=105939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253786.519:16245): pid=105939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253786.520:16246): pid=105939 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253786.524:16247): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253786.524:16248): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253789.575:16249): pid=106228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=106228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253789.606:16250): pid=106227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106228 suid=74 rport=50572 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253789.607:16251): pid=106227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106228 suid=74 rport=50572 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253789.842:16252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253789.844:16253): pid=106227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="adrian" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253790.002:16254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253791.182:16255): pid=105284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=105284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1781253792.629:16256): pid=106227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106228 suid=74 rport=50572 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253792.629:16257): pid=106227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=106228 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253792.630:16258): pid=106227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=106227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253792.630:16259): pid=106227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253792.652:16260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253792.957:16261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253795.177:16262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253795.179:16263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253795.267:16264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253795.318:16265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253796.593:16266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253796.593:16267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253796.660:16268): pid=106820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253796.661:16269): pid=106820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65786B75766861696B63746B70646E6E7371757A616D746E6461656D6C756775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253796.661:16270): pid=106820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253796.666:16271): pid=106820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253796.827:16272): pid=106820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253796.827:16273): pid=106820 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253796.831:16274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253796.831:16275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253797.815:16276): pid=106892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=106892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253797.946:16277): pid=106891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106892 suid=74 rport=55694 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253797.947:16278): pid=106891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106892 suid=74 rport=55694 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253798.172:16279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253798.176:16280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253798.474:16281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253798.529:16282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253798.610:16283): pid=106891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253799.388:16284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8ca1377768dc4b05a27aef4597897d56 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253799.740:16285): prog-id=838 op=LOAD
type=BPF msg=audit(1781253799.740:16286): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.740:16287): prog-id=839 op=LOAD
type=BPF msg=audit(1781253799.740:16288): prog-id=840 op=LOAD
type=BPF msg=audit(1781253799.740:16289): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.740:16290): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.745:16291): prog-id=841 op=LOAD
type=BPF msg=audit(1781253799.745:16292): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.745:16293): prog-id=842 op=LOAD
type=BPF msg=audit(1781253799.746:16294): prog-id=843 op=LOAD
type=BPF msg=audit(1781253799.746:16295): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.746:16296): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.749:16297): prog-id=844 op=LOAD
type=BPF msg=audit(1781253799.749:16298): prog-id=845 op=LOAD
type=BPF msg=audit(1781253799.749:16299): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.750:16300): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.751:16301): prog-id=846 op=LOAD
type=BPF msg=audit(1781253799.751:16302): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253799.752:16303): prog-id=847 op=LOAD
type=BPF msg=audit(1781253799.752:16304): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1781253799.782:16305): pid=106622 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ReadLine-0:1.17-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253799.782:16306): pid=106622 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Copy-0:2.34-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253799.782:16307): pid=106622 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-config-3.2.6-1.el9_0.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253799.782:16308): pid=106622 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-3.2.6-1.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253799.782:16309): pid=106622 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-agent-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1781253799.782:16310): pid=106622 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253799.899:16311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253799.899:16312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253799.900:16313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8ca1377768dc4b05a27aef4597897d56 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253801.068:16314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253801.215:16315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253802.373:16316): pid=106891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106892 suid=74 rport=55694 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253802.374:16317): pid=106891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=106892 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253802.375:16318): pid=106891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=106891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253802.375:16319): pid=106891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253802.404:16320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253802.571:16321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253806.519:16322): prog-id=848 op=LOAD
type=BPF msg=audit(1781253806.519:16323): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.519:16324): prog-id=849 op=LOAD
type=BPF msg=audit(1781253806.519:16325): prog-id=850 op=LOAD
type=BPF msg=audit(1781253806.519:16326): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.519:16327): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.525:16328): prog-id=851 op=LOAD
type=BPF msg=audit(1781253806.525:16329): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.525:16330): prog-id=852 op=LOAD
type=BPF msg=audit(1781253806.525:16331): prog-id=853 op=LOAD
type=BPF msg=audit(1781253806.525:16332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.525:16333): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.529:16334): prog-id=854 op=LOAD
type=BPF msg=audit(1781253806.529:16335): prog-id=855 op=LOAD
type=BPF msg=audit(1781253806.529:16336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.529:16337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.530:16338): prog-id=856 op=LOAD
type=BPF msg=audit(1781253806.530:16339): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.531:16340): prog-id=857 op=LOAD
type=BPF msg=audit(1781253806.531:16341): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253806.670:16342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=snmpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253806.900:16343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253806.900:16344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253806.969:16345): pid=107762 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253806.970:16346): pid=107762 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6773686F786D75736A6D6563706C736974797572756B6161786972637A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253806.971:16347): pid=107762 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253806.996:16348): prog-id=858 op=LOAD
type=BPF msg=audit(1781253806.996:16349): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.996:16350): prog-id=859 op=LOAD
type=BPF msg=audit(1781253806.996:16351): prog-id=860 op=LOAD
type=BPF msg=audit(1781253806.996:16352): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253806.996:16353): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.001:16354): prog-id=861 op=LOAD
type=BPF msg=audit(1781253807.002:16355): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.002:16356): prog-id=862 op=LOAD
type=BPF msg=audit(1781253807.002:16357): prog-id=863 op=LOAD
type=BPF msg=audit(1781253807.002:16358): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.002:16359): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.006:16360): prog-id=864 op=LOAD
type=BPF msg=audit(1781253807.006:16361): prog-id=865 op=LOAD
type=BPF msg=audit(1781253807.006:16362): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.006:16363): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.007:16364): prog-id=866 op=LOAD
type=BPF msg=audit(1781253807.007:16365): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.009:16366): prog-id=867 op=LOAD
type=BPF msg=audit(1781253807.009:16367): prog-id=0 op=UNLOAD
type=USER_START msg=audit(1781253807.023:16368): pid=107762 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253807.185:16369): pid=107762 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253807.185:16370): pid=107762 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253807.188:16371): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253807.188:16372): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1781253807.300:16373): prog-id=868 op=LOAD
type=BPF msg=audit(1781253807.300:16374): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.300:16375): prog-id=869 op=LOAD
type=BPF msg=audit(1781253807.300:16376): prog-id=870 op=LOAD
type=BPF msg=audit(1781253807.300:16377): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.300:16378): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.305:16379): prog-id=871 op=LOAD
type=BPF msg=audit(1781253807.305:16380): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.305:16381): prog-id=872 op=LOAD
type=BPF msg=audit(1781253807.305:16382): prog-id=873 op=LOAD
type=BPF msg=audit(1781253807.305:16383): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.305:16384): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.311:16385): prog-id=874 op=LOAD
type=BPF msg=audit(1781253807.311:16386): prog-id=875 op=LOAD
type=BPF msg=audit(1781253807.311:16387): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.311:16388): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.312:16389): prog-id=876 op=LOAD
type=BPF msg=audit(1781253807.313:16390): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253807.314:16391): prog-id=877 op=LOAD
type=BPF msg=audit(1781253807.314:16392): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253811.172:16393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253811.325:16394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253817.257:16395): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253817.257:16396): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253817.299:16397): pid=108515 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253817.299:16398): pid=108515 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A676C6D6F70736E7767637376637778726C6373746F7673627A69656A776761203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253817.300:16399): pid=108515 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253817.304:16400): pid=108515 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253817.477:16401): pid=108515 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253817.478:16402): pid=108515 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253817.483:16403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253817.483:16404): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253817.878:16405): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253817.878:16406): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253817.920:16407): pid=108596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253817.920:16408): pid=108596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767879786A7567676E627167746B646C6E71706A64786E626463636A7371777A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253817.920:16409): pid=108596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253817.924:16410): pid=108596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253818.114:16411): pid=108596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253818.114:16412): pid=108596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253818.118:16413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253818.118:16414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253818.218:16415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253818.218:16416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253818.273:16417): pid=108612 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253818.273:16418): pid=108612 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E6D6779776C6B6279686B6570647371617778747276786B676E736A647568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253818.273:16419): pid=108612 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253818.275:16420): pid=108612 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253818.471:16421): pid=108612 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253818.471:16422): pid=108612 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253818.476:16423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253818.476:16424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253818.719:16425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253818.719:16426): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253818.753:16427): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253818.753:16428): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253818.795:16429): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253818.795:16430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253818.833:16431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253818.833:16432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253818.875:16433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253818.875:16434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253818.942:16435): pid=108739 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253818.942:16436): pid=108739 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776572626B7573756179777968776972767972657463747A667769746C66756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253818.944:16437): pid=108739 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253818.946:16438): pid=108739 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253819.140:16439): pid=108739 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253819.140:16440): pid=108739 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253819.143:16441): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253819.143:16442): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253819.184:16443): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253819.184:16444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253819.221:16445): pid=108757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253819.222:16446): pid=108757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67726D73757361657863746F7569656877727A65707A69686F6270666E616A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253819.222:16447): pid=108757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253819.224:16448): pid=108757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253819.471:16449): pid=108757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253819.472:16450): pid=108757 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253819.476:16451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253819.476:16452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253819.518:16453): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253819.518:16454): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253819.543:16455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253819.543:16456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253819.660:16457): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253819.660:16458): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253819.713:16459): pid=108803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253819.713:16460): pid=108803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7278656C76657263636666737376786D70787574756E656E6F71646E786A7162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253819.715:16461): pid=108803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253819.719:16462): pid=108803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253819.897:16463): pid=108803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253819.898:16464): pid=108803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253819.901:16465): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253819.901:16466): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253820.052:16467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253820.052:16468): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253820.108:16469): pid=108829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253820.108:16470): pid=108829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647165756D636C6B63777161666A6C717A6C616D736A72616D6E7978796A6B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253820.109:16471): pid=108829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253820.112:16472): pid=108829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253820.126:16473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253820.238:16474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253820.597:16475): pid=108829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253820.597:16476): pid=108829 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253820.602:16477): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253820.602:16478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253820.829:16479): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253820.829:16480): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253820.897:16481): pid=109011 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253820.897:16482): pid=109011 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6B706976616E6C667A71686C65657968626F656A7969706675736473747A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253820.898:16483): pid=109011 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253820.902:16484): pid=109011 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253821.132:16485): pid=109011 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253821.132:16486): pid=109011 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253821.137:16487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253821.137:16488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253821.613:16489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253821.613:16490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253821.653:16491): pid=109057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253821.653:16492): pid=109057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6161686F787A7171696D6E7069646C76756C78727A6D6A61626A616D6C6F6E62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253821.654:16493): pid=109057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253821.655:16494): pid=109057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253821.832:16495): pid=109057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253821.832:16496): pid=109057 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253821.835:16497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253821.835:16498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253821.953:16499): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253821.953:16500): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253822.018:16501): pid=109090 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253822.019:16502): pid=109090 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737472656B69667674706C6A7868796977687071717372646E74766B61796862203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253822.019:16503): pid=109090 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253822.021:16504): pid=109090 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253822.101:16505): pid=109094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=109094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781253822.215:16506): pid=109090 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253822.215:16507): pid=109090 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253822.219:16508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253822.219:16509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781253822.233:16510): pid=109093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=109094 suid=74 rport=50646 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253822.234:16511): pid=109093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=109094 suid=74 rport=50646 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253822.605:16512): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253822.606:16513): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253822.657:16514): pid=109165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253822.658:16515): pid=109165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F757567657A666F757764637067676178676C756C7175676A6A786761727767203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253822.658:16516): pid=109165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253822.661:16517): pid=109165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253822.872:16518): pid=109165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253822.872:16519): pid=109165 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253822.874:16520): pid=109093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jayesh" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253822.876:16521): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253822.876:16522): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253823.081:16523): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.081:16524): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253823.111:16525): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253823.111:16526): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253823.153:16527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.154:16528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253823.171:16529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253823.192:16530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253823.192:16531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253823.234:16532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.234:16533): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253823.289:16534): pid=109262 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253823.289:16535): pid=109262 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C6A787661696E706E71666C78686E7A73676979746F677A61746571696171203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253823.290:16536): pid=109262 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253823.294:16537): pid=109262 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253823.440:16538): pid=109262 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253823.440:16539): pid=109262 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253823.444:16540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253823.444:16541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253823.446:16542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253823.485:16543): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.485:16544): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253823.533:16545): pid=109338 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253823.533:16546): pid=109338 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6B6C62726178747862637A73647374767279676D6C72616873677073636A7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253823.534:16547): pid=109338 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253823.535:16548): pid=109338 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253823.709:16549): pid=109338 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253823.710:16550): pid=109338 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253823.714:16551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253823.714:16552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253823.750:16553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.750:16554): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253823.777:16555): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253823.777:16556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253823.842:16557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.843:16558): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253823.868:16559): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253823.868:16560): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253823.912:16561): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.912:16562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253823.948:16563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253823.948:16564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253823.988:16565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253823.988:16566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253824.048:16567): pid=109421 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253824.049:16568): pid=109421 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7675656B6B666A796C796879727273726E78707A75686C7268766B6963696D66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253824.049:16569): pid=109421 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253824.051:16570): pid=109421 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253824.243:16571): pid=109421 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253824.243:16572): pid=109421 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253824.246:16573): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253824.246:16574): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253824.288:16575): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253824.288:16576): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253824.330:16577): pid=109441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253824.330:16578): pid=109441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D73747A6A736F7A61616D6D757163616B67656E6C6E6A6561736568787364203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253824.331:16579): pid=109441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253824.333:16580): pid=109441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253824.499:16581): pid=109441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253824.499:16582): pid=109441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253824.503:16583): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253824.503:16584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253824.544:16585): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253824.544:16586): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253824.564:16587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253824.564:16588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253824.698:16589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253824.698:16590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253824.729:16591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253824.729:16592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253824.770:16593): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253824.770:16594): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253824.803:16595): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253824.803:16596): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253824.853:16597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253824.853:16598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253824.899:16599): pid=109523 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253824.899:16600): pid=109523 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A6D6874637672766B78676F756574757467706F63646477636873776F6C6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253824.900:16601): pid=109523 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253824.902:16602): pid=109523 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253825.060:16603): pid=109523 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253825.060:16604): pid=109523 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253825.064:16605): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253825.064:16606): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253825.105:16607): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253825.105:16608): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253825.144:16609): pid=109569 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253825.145:16610): pid=109569 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6765676C696C726D70786C70637063697A61747575747A666A6D6C7675746674203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253825.145:16611): pid=109569 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253825.147:16612): pid=109569 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253825.293:16613): pid=109569 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253825.293:16614): pid=109569 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253825.296:16615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253825.297:16616): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253825.338:16617): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253825.338:16618): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253825.368:16619): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253825.368:16620): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253825.495:16621): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253825.495:16622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253825.519:16623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253825.519:16624): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253825.561:16625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253825.561:16626): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253825.589:16627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253825.590:16628): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253825.632:16629): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253825.632:16630): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253825.684:16631): pid=109660 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253825.684:16632): pid=109660 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E72627269646A70746B756365646E63716C6366626B6F6D636B627174667773203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253825.685:16633): pid=109660 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253825.689:16634): pid=109660 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253825.706:16635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253825.710:16636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253825.870:16637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253825.876:16638): pid=109660 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253825.876:16639): pid=109660 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253825.879:16640): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253825.879:16641): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253825.914:16642): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253825.914:16643): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253825.954:16644): pid=109733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253825.954:16645): pid=109733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6571646A787171656F6F76696F757164767066616665646368626C6F646D786C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253825.954:16646): pid=109733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253825.957:16647): pid=109733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253825.960:16648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253826.153:16649): pid=109733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253826.153:16650): pid=109733 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253826.156:16651): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253826.156:16652): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253826.198:16653): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253826.198:16654): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253826.226:16655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253826.226:16656): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253826.357:16657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253826.357:16658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253826.421:16659): pid=109771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253826.421:16660): pid=109771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706973616375646C6D6F706E6A6D6367697765796261767476646E6B63666C68203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253826.421:16661): pid=109771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253826.424:16662): pid=109771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253826.551:16663): pid=109093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=109094 suid=74 rport=50646 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253826.551:16664): pid=109093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=109094 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253826.553:16665): pid=109093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=109093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253826.553:16666): pid=109093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253826.987:16667): prog-id=878 op=LOAD
type=BPF msg=audit(1781253826.987:16668): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.987:16669): prog-id=879 op=LOAD
type=BPF msg=audit(1781253826.987:16670): prog-id=880 op=LOAD
type=BPF msg=audit(1781253826.987:16671): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.987:16672): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.992:16673): prog-id=881 op=LOAD
type=BPF msg=audit(1781253826.993:16674): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.993:16675): prog-id=882 op=LOAD
type=BPF msg=audit(1781253826.993:16676): prog-id=883 op=LOAD
type=BPF msg=audit(1781253826.993:16677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.993:16678): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.997:16679): prog-id=884 op=LOAD
type=BPF msg=audit(1781253826.997:16680): prog-id=885 op=LOAD
type=BPF msg=audit(1781253826.997:16681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.997:16682): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253826.998:16683): prog-id=886 op=LOAD
type=BPF msg=audit(1781253826.998:16684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253827.000:16685): prog-id=887 op=LOAD
type=BPF msg=audit(1781253827.000:16686): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781253827.085:16687): pid=109771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253827.085:16688): pid=109771 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253827.090:16689): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253827.090:16690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253827.216:16691): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253827.216:16692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253827.246:16693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253827.246:16694): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253827.287:16695): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253827.288:16696): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253827.321:16697): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253827.321:16698): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253827.363:16699): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253827.363:16700): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253827.408:16701): pid=109881 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253827.409:16702): pid=109881 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F637078676179726B746F737965616D6161686967646E6365767078697769203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253827.409:16703): pid=109881 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253827.413:16704): pid=109881 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253827.595:16705): pid=109881 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253827.595:16706): pid=109881 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253827.599:16707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253827.599:16708): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253827.640:16709): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253827.641:16710): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253827.687:16711): pid=109948 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253827.687:16712): pid=109948 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647466677976696C7665676974636C78726C79796662716C746F6F6970736A77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253827.688:16713): pid=109948 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253827.690:16714): pid=109948 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253827.844:16715): pid=109948 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253827.845:16716): pid=109948 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253827.848:16717): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253827.848:16718): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253827.888:16719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253827.889:16720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253827.919:16721): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253827.920:16722): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253828.026:16723): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253828.026:16724): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253828.048:16725): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253828.048:16726): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253828.089:16727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253828.090:16728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253828.123:16729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253828.123:16730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253828.166:16731): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253828.166:16732): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253828.220:16733): pid=110026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253828.220:16734): pid=110026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77796E6E74786E6A7161756276616A766C6C7875627A6761636D677277756C63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253828.221:16735): pid=110026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253828.225:16736): pid=110026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253828.411:16737): pid=110026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253828.411:16738): pid=110026 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253828.416:16739): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253828.416:16740): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253828.458:16741): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253828.458:16742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253828.521:16743): pid=110044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253828.521:16744): pid=110044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F72666D61656761766F77676D6A6D707867767876736E64636B68726A76797A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253828.521:16745): pid=110044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253828.523:16746): pid=110044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253828.532:16747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253828.535:16748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253828.673:16749): pid=110044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253828.673:16750): pid=110044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253828.676:16751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253828.676:16752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253828.696:16753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253828.718:16754): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253828.718:16755): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253828.744:16756): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253828.745:16757): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253828.779:16758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253828.869:16759): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253828.869:16760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253828.928:16761): pid=110188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253828.929:16762): pid=110188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B646F707369636476666F747A67777471786C786370646E7368746567796C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253828.929:16763): pid=110188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253828.934:16764): pid=110188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253829.471:16765): prog-id=888 op=LOAD
type=BPF msg=audit(1781253829.471:16766): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.471:16767): prog-id=889 op=LOAD
type=BPF msg=audit(1781253829.471:16768): prog-id=890 op=LOAD
type=BPF msg=audit(1781253829.471:16769): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.471:16770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.477:16771): prog-id=891 op=LOAD
type=BPF msg=audit(1781253829.477:16772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.477:16773): prog-id=892 op=LOAD
type=BPF msg=audit(1781253829.477:16774): prog-id=893 op=LOAD
type=BPF msg=audit(1781253829.477:16775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.477:16776): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.481:16777): prog-id=894 op=LOAD
type=BPF msg=audit(1781253829.481:16778): prog-id=895 op=LOAD
type=BPF msg=audit(1781253829.481:16779): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.481:16780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.482:16781): prog-id=896 op=LOAD
type=BPF msg=audit(1781253829.482:16782): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253829.484:16783): prog-id=897 op=LOAD
type=BPF msg=audit(1781253829.484:16784): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253829.572:16785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253829.572:16786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253829.606:16787): pid=110188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253829.606:16788): pid=110188 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253829.611:16789): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253829.611:16790): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253829.820:16791): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253829.820:16792): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253829.891:16793): pid=110270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253829.891:16794): pid=110270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6575726E667977776C6371736D6E7264786B666978616C727774726471687166203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253829.892:16795): pid=110270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253829.896:16796): pid=110270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253830.101:16797): pid=110270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253830.101:16798): pid=110270 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253830.104:16799): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253830.104:16800): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253830.418:16801): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253830.418:16802): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253830.477:16803): pid=110294 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253830.477:16804): pid=110294 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D707466706877627162716A74616B686A6B68696F6C656B78756462676F6D71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253830.478:16805): pid=110294 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253830.481:16806): pid=110294 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253831.088:16807): pid=110294 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253831.088:16808): pid=110294 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253831.134:16809): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253831.134:16810): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253832.154:16811): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253832.154:16812): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253832.170:16813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253832.230:16814): pid=110390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253832.231:16815): pid=110390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C6A6569616F7A766B64746C767972686A78696F716F62706E696A63656F71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253832.232:16816): pid=110390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253832.237:16817): pid=110390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253832.334:16818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253832.776:16819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253832.838:16820): prog-id=898 op=LOAD
type=SYSCALL msg=audit(1781253832.838:16820): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc8d664260 a2=90 a3=9500000000 items=0 ppid=110648 pid=110649 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253832.838:16820): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363437616263386233393338306462623130626235376162623564616434
type=BPF msg=audit(1781253832.845:16821): prog-id=899 op=LOAD
type=SYSCALL msg=audit(1781253832.845:16821): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd564e0e40 a2=90 a3=9500000000 items=0 ppid=110644 pid=110645 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253832.845:16821): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623933363461623435613363666439613364386234383836623031306636
type=SERVICE_START msg=audit(1781253832.899:16822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253832.954:16823): prog-id=900 op=LOAD
type=SYSCALL msg=audit(1781253832.954:16823): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff2065e660 a2=90 a3=9500000000 items=0 ppid=110715 pid=110716 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253832.954:16823): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306434363430326531663732333062613434326533613933663833643063
type=SERVICE_START msg=audit(1781253832.961:16824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253832.980:16825): prog-id=901 op=LOAD
type=SYSCALL msg=audit(1781253832.980:16825): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe9abca590 a2=90 a3=9500000000 items=0 ppid=110726 pid=110727 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253832.980:16825): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383165656431343437383030613134323961396238666634336662326333
type=SERVICE_STOP msg=audit(1781253833.003:16826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253833.020:16827): prog-id=902 op=LOAD
type=SYSCALL msg=audit(1781253833.020:16827): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe18bc0800 a2=90 a3=9500000000 items=0 ppid=110756 pid=110757 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253833.020:16827): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393663663034656330373739646335346533633362613031643066313030
type=SERVICE_START msg=audit(1781253833.054:16828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253833.144:16829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253833.212:16830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253833.284:16831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253833.299:16832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253833.319:16833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253833.630:16834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253833.649:16835): prog-id=903 op=LOAD
type=SYSCALL msg=audit(1781253833.649:16835): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd18a2f970 a2=90 a3=9500000001 items=0 ppid=111104 pid=111106 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253833.649:16835): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363038383162366134643938623438623137393435303136383137633037
type=BPF msg=audit(1781253833.852:16836): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253834.005:16837): prog-id=904 op=LOAD
type=SYSCALL msg=audit(1781253834.005:16837): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff5dc66fc0 a2=90 a3=9500000000 items=0 ppid=111254 pid=111255 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253834.005:16837): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313833643134333031646663616462333531336264353437353439366433
type=BPF msg=audit(1781253834.070:16838): prog-id=905 op=LOAD
type=SYSCALL msg=audit(1781253834.070:16838): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcedeae3c0 a2=90 a3=9500000000 items=0 ppid=111264 pid=111265 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253834.070:16838): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353262313333656266356134656432353461383635386139333130303134
type=BPF msg=audit(1781253834.093:16839): prog-id=906 op=LOAD
type=SYSCALL msg=audit(1781253834.093:16839): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc05e26850 a2=90 a3=9500000000 items=0 ppid=111274 pid=111275 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253834.093:16839): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303039323864323466333837363732343537663934626232636139646434
type=SERVICE_START msg=audit(1781253834.150:16840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253834.172:16841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253834.233:16842): prog-id=907 op=LOAD
type=SYSCALL msg=audit(1781253834.233:16842): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe7c6ee550 a2=90 a3=9500000000 items=0 ppid=111322 pid=111323 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253834.233:16842): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363063333631353764373839613236363831366431396236633066333432
type=SERVICE_START msg=audit(1781253834.405:16843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253834.459:16844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253834.805:16845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253834.835:16846): pid=111580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=111580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781253835.066:16847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253835.090:16848): pid=111575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=111580 suid=74 rport=60374 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253835.091:16849): pid=111575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=111580 suid=74 rport=60374 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253835.344:16850): prog-id=908 op=LOAD
type=SYSCALL msg=audit(1781253835.344:16850): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffff68ed850 a2=90 a3=9500000001 items=0 ppid=111799 pid=111800 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253835.344:16850): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383930336164623761653332396562643333366333393936636538653230
type=USER_ACCT msg=audit(1781253835.498:16851): pid=111849 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253835.499:16852): pid=111849 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253835.500:16853): pid=111849 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1781253835.501:16854): pid=111849 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253835.519:16855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253835.660:16856): pid=111849 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253835.660:16857): pid=111849 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1781253835.775:16858): prog-id=909 op=LOAD
type=SYSCALL msg=audit(1781253835.775:16858): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffc565ef90 a2=90 a3=9500000000 items=0 ppid=111906 pid=111909 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253835.775:16858): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343066386332386132643765333062303531663437383863396462353861
type=SERVICE_STOP msg=audit(1781253835.787:16859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253835.847:16860): prog-id=910 op=LOAD
type=SYSCALL msg=audit(1781253835.847:16860): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6eee8510 a2=90 a3=9500000000 items=0 ppid=111929 pid=111930 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253835.847:16860): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336532393035343230653535616263643366396239306534313266303866
type=SERVICE_START msg=audit(1781253835.930:16861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253836.122:16862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253836.204:16863): prog-id=911 op=LOAD
type=SYSCALL msg=audit(1781253836.204:16863): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd85b48450 a2=90 a3=9500000000 items=0 ppid=112027 pid=112029 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253836.204:16863): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613538386565613661646132623735336266653264323063363461383365
type=BPF msg=audit(1781253836.207:16864): prog-id=912 op=LOAD
type=SYSCALL msg=audit(1781253836.207:16864): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5f97d830 a2=90 a3=9500000000 items=0 ppid=112031 pid=112032 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253836.207:16864): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663933623062366264356131353832383234373933343130636461663737
type=USER_AUTH msg=audit(1781253836.263:16865): pid=111575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jacob" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253836.366:16866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253836.403:16867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253836.533:16868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253836.672:16869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253836.829:16870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253836.854:16871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253836.965:16872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253837.058:16873): prog-id=913 op=LOAD
type=SYSCALL msg=audit(1781253837.058:16873): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff357f33f0 a2=90 a3=9500000000 items=0 ppid=112338 pid=112339 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253837.058:16873): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646162373338363332316437303037393739323666353861386566663862
type=BPF msg=audit(1781253837.058:16874): prog-id=914 op=LOAD
type=SYSCALL msg=audit(1781253837.058:16874): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeff454ce0 a2=90 a3=9500000000 items=0 ppid=112342 pid=112343 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253837.058:16874): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633233306539663065643266383138666566376233323933623661303435
type=SERVICE_START msg=audit(1781253837.159:16875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253837.252:16876): prog-id=915 op=LOAD
type=SYSCALL msg=audit(1781253837.252:16876): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff72cb71f0 a2=90 a3=9500000000 items=0 ppid=112400 pid=112401 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253837.252:16876): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353937376566323736306263386333363561313266306664336330393130
type=SERVICE_START msg=audit(1781253837.424:16877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253837.539:16878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253837.721:16879): prog-id=916 op=LOAD
type=SYSCALL msg=audit(1781253837.721:16879): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb87f7f80 a2=90 a3=9500000000 items=0 ppid=112579 pid=112580 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253837.721:16879): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363932316237303064363839663564363836303439623364393034343233
type=SERVICE_STOP msg=audit(1781253837.823:16880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253837.841:16881): prog-id=917 op=LOAD
type=SYSCALL msg=audit(1781253837.841:16881): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff59be2fa0 a2=90 a3=9500000000 items=0 ppid=112649 pid=112650 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253837.841:16881): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633437356362373430353438633234376638636364633862623134633035
type=SERVICE_START msg=audit(1781253837.972:16882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253838.627:16883): prog-id=918 op=LOAD
type=SYSCALL msg=audit(1781253838.627:16883): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd379eb470 a2=90 a3=9500000000 items=0 ppid=112847 pid=112848 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253838.627:16883): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633236316466326634373965643564656666376661393965636464336661
type=BPF msg=audit(1781253838.657:16884): prog-id=919 op=LOAD
type=SYSCALL msg=audit(1781253838.657:16884): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcea9e0e90 a2=90 a3=9500000000 items=0 ppid=112853 pid=112854 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253838.657:16884): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376337376365623436323064343033366666396561313664396433313233
type=SERVICE_START msg=audit(1781253838.787:16885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253838.950:16886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253838.968:16887): prog-id=920 op=LOAD
type=SYSCALL msg=audit(1781253838.968:16887): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe50f158c0 a2=90 a3=9500000000 items=0 ppid=112936 pid=112937 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253838.968:16887): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373266386131326663663636643762646637653263643937353931373263
type=CRYPTO_KEY_USER msg=audit(1781253839.072:16888): pid=111575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=111580 suid=74 rport=60374 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253839.080:16889): pid=111575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=111580 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253839.081:16890): pid=111575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=111575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253839.081:16891): pid=111575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253839.174:16892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253839.512:16893): prog-id=921 op=LOAD
type=SYSCALL msg=audit(1781253839.512:16893): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc04889e20 a2=90 a3=9500000000 items=0 ppid=113134 pid=113135 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253839.512:16893): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393065393834306631653966316438363137633765333338633265666332
type=SERVICE_STOP msg=audit(1781253839.527:16894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253839.674:16895): prog-id=922 op=LOAD
type=SYSCALL msg=audit(1781253839.674:16895): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdf8823eb0 a2=90 a3=9500000000 items=0 ppid=113174 pid=113176 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253839.674:16895): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393534306330323066343335303431623861653939666463396138323536
type=SERVICE_START msg=audit(1781253839.793:16896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253840.208:16897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253840.316:16898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253840.325:16899): prog-id=923 op=LOAD
type=SYSCALL msg=audit(1781253840.325:16899): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe8c660dd0 a2=90 a3=9500000000 items=0 ppid=113370 pid=113371 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253840.325:16899): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373033393138666139636636373566613537303562323263636436336331
type=SERVICE_START msg=audit(1781253840.481:16900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253840.637:16901): prog-id=924 op=LOAD
type=SYSCALL msg=audit(1781253840.637:16901): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc34948920 a2=90 a3=9500000000 items=0 ppid=113449 pid=113450 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253840.637:16901): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363062323064653033666661653438636135666432343063386639633130
type=BPF msg=audit(1781253840.644:16902): prog-id=925 op=LOAD
type=SYSCALL msg=audit(1781253840.644:16902): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2664d820 a2=90 a3=9500000000 items=0 ppid=113457 pid=113458 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253840.644:16902): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633637336365333835363733623138613565366164663430666164323861
type=SERVICE_STOP msg=audit(1781253840.749:16903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253841.198:16904): prog-id=926 op=LOAD
type=SYSCALL msg=audit(1781253841.198:16904): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff19077c20 a2=90 a3=9500000000 items=0 ppid=113590 pid=113591 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253841.198:16904): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653764643038313463376264393530623437303765393030366461363831
type=BPF msg=audit(1781253841.303:16905): prog-id=927 op=LOAD
type=SYSCALL msg=audit(1781253841.303:16905): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd30fbd860 a2=90 a3=9500000000 items=0 ppid=113605 pid=113606 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253841.303:16905): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386362346361666362376233353731616433356235626130343965663038
type=SERVICE_START msg=audit(1781253841.356:16906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253841.392:16907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253841.808:16908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253841.850:16909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253842.020:16910): prog-id=928 op=LOAD
type=SYSCALL msg=audit(1781253842.020:16910): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc94c70730 a2=90 a3=9500000000 items=0 ppid=113891 pid=113892 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253842.020:16910): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643637666333306366316362646333313032636164333533376432343363
type=SERVICE_START msg=audit(1781253842.085:16911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253842.219:16912): prog-id=929 op=LOAD
type=SYSCALL msg=audit(1781253842.219:16912): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2f99c710 a2=90 a3=9500000000 items=0 ppid=113929 pid=113930 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253842.219:16912): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383566666538343139643833363539326364643639643936353235383730
type=BPF msg=audit(1781253842.233:16913): prog-id=930 op=LOAD
type=SYSCALL msg=audit(1781253842.233:16913): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc54c2eb60 a2=90 a3=9500000000 items=0 ppid=113927 pid=113928 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253842.233:16913): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306137643435303739616634363730626462306565633061376538343439
type=SERVICE_START msg=audit(1781253842.329:16914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253842.596:16915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253842.990:16916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253843.230:16917): prog-id=931 op=LOAD
type=SYSCALL msg=audit(1781253843.230:16917): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6a05f550 a2=90 a3=9500000000 items=0 ppid=114205 pid=114206 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253843.230:16917): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306535346634623162353735313232643435633265623962646635303262
type=BPF msg=audit(1781253843.234:16918): prog-id=932 op=LOAD
type=SYSCALL msg=audit(1781253843.234:16918): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffef41b8bd0 a2=90 a3=9500000001 items=0 ppid=114207 pid=114208 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253843.234:16918): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346634333436356632393564643130616137356366633464376162356235
type=SERVICE_START msg=audit(1781253843.292:16919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253843.344:16920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253843.360:16921): pid=114229 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253843.360:16922): pid=114229 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253843.361:16923): pid=114229 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253843.401:16924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253843.444:16925): pid=114248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1781253843.444:16926): pid=114248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1781253843.444:16927): pid=114248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781253843.445:16928): pid=114248 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1781253843.445:16928): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffc03640a30 a2=1 a3=0 items=0 ppid=1 pid=114248 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253843.445:16928): proctitle="(systemd)"
type=USER_START msg=audit(1781253843.449:16929): pid=114248 uid=0 auid=0 ses=19 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1781253843.487:16930): prog-id=933 op=LOAD
type=SYSCALL msg=audit(1781253843.487:16930): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffed8b08780 a2=90 a3=0 items=0 ppid=1 pid=114248 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253843.487:16930): proctitle="(systemd)"
type=BPF msg=audit(1781253843.487:16931): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253843.487:16932): prog-id=934 op=LOAD
type=SYSCALL msg=audit(1781253843.487:16932): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffed8b08820 a2=90 a3=4 items=0 ppid=1 pid=114248 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253843.487:16932): proctitle="(systemd)"
type=BPF msg=audit(1781253843.487:16933): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253843.626:16934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253843.659:16935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253843.675:16936): pid=114229 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1781253843.732:16937): pid=114229 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253843.732:16938): pid=114229 uid=0 auid=1002 ses=16 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=ANOM_PROMISCUOUS msg=audit(1781253843.792:16939): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781253843.792:16939): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fffbbc87ba0 a2=0 a3=0 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781253843.792:16939): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1781253843.849:16940): dev=genev_sys_6081 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1781253843.849:16940): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fffbbc87ba0 a2=0 a3=17c1 items=0 ppid=1 pid=22253 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1781253843.849:16940): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1781253844.247:16941): prog-id=935 op=LOAD
type=SYSCALL msg=audit(1781253844.247:16941): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdc4473530 a2=90 a3=9500000000 items=0 ppid=114581 pid=114582 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253844.247:16941): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613964383563613865623333616339343236316133376363636364616662
type=BPF msg=audit(1781253844.338:16942): prog-id=936 op=LOAD
type=SYSCALL msg=audit(1781253844.338:16942): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff9f117d30 a2=90 a3=9500000000 items=0 ppid=114591 pid=114592 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253844.338:16942): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333437353662363238346239366638323665616331303865383434646564
type=SERVICE_START msg=audit(1781253844.347:16943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253844.381:16944): prog-id=937 op=LOAD
type=SYSCALL msg=audit(1781253844.381:16944): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe39add940 a2=90 a3=9500000000 items=0 ppid=114604 pid=114605 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253844.381:16944): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636133323366336564323933613135313565613235396437316130663937
type=BPF msg=audit(1781253844.433:16945): prog-id=938 op=LOAD
type=SYSCALL msg=audit(1781253844.433:16945): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffd884fd50 a2=90 a3=9500000000 items=0 ppid=114620 pid=114621 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253844.433:16945): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313464613966333362326530333065626661656436326535623734373162
type=BPF msg=audit(1781253844.492:16946): prog-id=939 op=LOAD
type=SYSCALL msg=audit(1781253844.492:16946): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffca5405940 a2=90 a3=9500000000 items=0 ppid=114628 pid=114629 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253844.492:16946): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303465623139313338343661316566306339363863656261633639363365
type=SERVICE_START msg=audit(1781253844.519:16947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253844.594:16948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253844.616:16949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253844.659:16950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253844.660:16951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253844.697:16952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253845.052:16953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253845.368:16954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253845.418:16955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253845.480:16956): pid=115011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=115011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=BPF msg=audit(1781253845.587:16957): prog-id=940 op=LOAD
type=SYSCALL msg=audit(1781253845.587:16957): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc902085b0 a2=90 a3=9500000000 items=0 ppid=115017 pid=115019 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253845.587:16957): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363638666461633334613737353336376338383865383262643761343235
type=BPF msg=audit(1781253845.589:16958): prog-id=941 op=LOAD
type=SYSCALL msg=audit(1781253845.589:16958): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff5b45660 a2=90 a3=9500000000 items=0 ppid=115016 pid=115018 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253845.589:16958): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386535626165336566373661666435663961333063333630373466663139
type=SERVICE_START msg=audit(1781253845.646:16959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253845.696:16960): pid=115008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=115011 suid=74 rport=40410 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253845.696:16961): pid=115008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=115011 suid=74 rport=40410 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253845.866:16962): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253845.984:16963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253847.006:16964): pid=115008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="matheus" exe="/usr/sbin/sshd" hostname=120.48.34.72 addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253847.102:16965): prog-id=942 op=LOAD
type=SYSCALL msg=audit(1781253847.102:16965): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdb596bb80 a2=90 a3=9500000000 items=0 ppid=115332 pid=115333 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253847.102:16965): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313539323138663938343633633131333562333033666236306436333435
type=BPF msg=audit(1781253847.267:16966): prog-id=943 op=LOAD
type=SYSCALL msg=audit(1781253847.267:16966): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe7b09ab10 a2=90 a3=9500000000 items=0 ppid=115368 pid=115369 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253847.267:16966): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633132316638613831353138373463373332396364626565653734663433
type=BPF msg=audit(1781253847.281:16967): prog-id=944 op=LOAD
type=SYSCALL msg=audit(1781253847.281:16967): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffedb01ec90 a2=90 a3=9500000000 items=0 ppid=115371 pid=115372 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253847.281:16967): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663933313231633362636431326637666166393563363530663534346263
type=BPF msg=audit(1781253847.361:16968): prog-id=945 op=LOAD
type=SYSCALL msg=audit(1781253847.361:16968): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffea4019140 a2=90 a3=9500000000 items=0 ppid=115398 pid=115399 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253847.361:16968): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373361323261306538633033363332363333373336396630373036656562
type=BPF msg=audit(1781253847.636:16969): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253848.155:16970): prog-id=946 op=LOAD
type=SYSCALL msg=audit(1781253848.155:16970): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffea93a8eb0 a2=90 a3=9500000000 items=0 ppid=115622 pid=115623 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781253848.155:16970): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353635343133663533313439343334666233373639373538636333643961
type=SERVICE_START msg=audit(1781253848.218:16971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253848.365:16972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253848.395:16973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253848.462:16974): pid=110390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253848.462:16975): pid=110390 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253848.466:16976): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253848.466:16977): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253848.695:16978): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253848.695:16979): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253848.739:16980): pid=115700 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253848.739:16981): pid=115700 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74677A6F78706A767262677A71736C696D6465787677626B716C6F7970666F6C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253848.740:16982): pid=115700 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253848.744:16983): pid=115700 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253848.910:16984): pid=115700 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253848.910:16985): pid=115700 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253848.915:16986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253848.915:16987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253848.955:16988): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253848.955:16989): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253849.012:16990): pid=115732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253849.013:16991): pid=115732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667570797A7563616F756A71626D6569756F766A7661637A66727A686B736366203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253849.014:16992): pid=115732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253849.016:16993): pid=115732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253849.191:16994): pid=115732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253849.191:16995): pid=115732 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253849.210:16996): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253849.210:16997): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253849.250:16998): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253849.250:16999): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253849.298:17000): pid=115756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253849.298:17001): pid=115756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6675667364666D7261706D787564777777617479786C7A79677A6670697977203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253849.300:17002): pid=115756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253849.303:17003): pid=115756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253849.495:17004): pid=115756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253849.495:17005): pid=115756 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253849.499:17006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253849.499:17007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253849.542:17008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253849.542:17009): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253849.594:17010): pid=115825 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253849.596:17011): pid=115825 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686262626973736363776B63686B747673746D7578686B7573766F6C7472716F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253849.596:17012): pid=115825 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253849.599:17013): pid=115825 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253849.801:17014): pid=115825 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253849.801:17015): pid=115825 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253849.804:17016): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253849.804:17017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253849.847:17018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253849.847:17019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253849.891:17020): pid=115851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253849.891:17021): pid=115851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70777962647461656179646A7179726F786F65796D75776670776870616C7270203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253849.892:17022): pid=115851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253849.893:17023): pid=115851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253850.049:17024): pid=115851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253850.049:17025): pid=115851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253850.055:17026): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253850.055:17027): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253850.095:17028): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253850.095:17029): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253850.145:17030): pid=115875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253850.146:17031): pid=115875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74736A70787366656B7761776F756B77746578766371766D7376627866797365203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253850.146:17032): pid=115875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253850.149:17033): pid=115875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253850.313:17034): pid=115875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253850.313:17035): pid=115875 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253850.317:17036): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253850.318:17037): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253850.362:17038): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253850.362:17039): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253850.421:17040): pid=115899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253850.422:17041): pid=115899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D61776E737879686C667073797A6663617A7169646876646F6F76746A6D72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253850.422:17042): pid=115899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253850.425:17043): pid=115899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253850.444:17044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253850.582:17045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253850.618:17046): pid=115899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253850.619:17047): pid=115899 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253850.622:17048): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253850.622:17049): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253850.663:17050): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253850.663:17051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253850.707:17052): pid=115937 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253850.707:17053): pid=115937 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7961797173756468696E74756B6864787672716E786369777164736C62657670203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253850.708:17054): pid=115937 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253850.710:17055): pid=115937 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253850.772:17056): pid=115941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=115941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1781253850.804:17057): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26102 suid=1000 rport=51294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781253850.811:17058): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781253850.811:17059): pid=26097 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1781253850.867:17060): pid=115940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=115941 suid=74 rport=58764 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253850.867:17061): pid=115940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=115941 suid=74 rport=58764 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253850.890:17062): pid=115937 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253850.890:17063): pid=115937 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253850.894:17064): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253850.894:17065): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253850.919:17066): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253850.919:17067): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253850.967:17068): pid=115972 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253850.968:17069): pid=115972 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C686D676F727871777776656D627269696F78736775767574646E6F6B7472203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253850.970:17070): pid=115972 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253850.974:17071): pid=115972 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253851.156:17072): pid=115972 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253851.157:17073): pid=115972 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253851.160:17074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253851.160:17075): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253851.202:17076): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253851.202:17077): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253851.259:17078): pid=115992 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253851.259:17079): pid=115992 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6570776F74626F7A6575657470746D657571726B6F6563666F6D73647A65756E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253851.260:17080): pid=115992 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253851.262:17081): pid=115992 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253851.364:17082): pid=115940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253851.500:17083): pid=115992 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253851.500:17084): pid=115992 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253851.504:17085): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253851.504:17086): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253851.538:17087): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253851.538:17088): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253851.577:17089): pid=116013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253851.577:17090): pid=116013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787161776B676272786B73766867687272786676786D617A6864796867767972203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253851.577:17091): pid=116013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253851.579:17092): pid=116013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253851.766:17093): pid=116013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253851.766:17094): pid=116013 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253851.770:17095): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253851.770:17096): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253851.812:17097): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253851.812:17098): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253851.858:17099): pid=116029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253851.859:17100): pid=116029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B79666867636F78746778616C656B656C6A6D6A757761717267786B7A756166203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253851.859:17101): pid=116029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253851.862:17102): pid=116029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.024:17103): pid=116029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253852.024:17104): pid=116029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.028:17105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253852.028:17106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253852.065:17107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253852.065:17108): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253852.112:17109): pid=116061 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253852.112:17110): pid=116061 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78656C7068687A7567696F676F747A696C67726B706871667A6D6C6775766962203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253852.113:17111): pid=116061 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253852.115:17112): pid=116061 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.310:17113): pid=116061 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253852.310:17114): pid=116061 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.314:17115): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253852.314:17116): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253852.354:17117): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253852.355:17118): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253852.415:17119): pid=116085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253852.415:17120): pid=116085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A636B7173736A656B75667073746F786E69657476696674746F6965626D6A63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253852.416:17121): pid=116085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253852.418:17122): pid=116085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.588:17123): pid=116085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253852.588:17124): pid=116085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.591:17125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253852.591:17126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253852.632:17127): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253852.632:17128): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253852.694:17129): pid=116101 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253852.694:17130): pid=116101 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62676C736C6A71767A726161686C6176636267736A6561717A73646F77777577203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253852.694:17131): pid=116101 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253852.697:17132): pid=116101 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.851:17133): pid=116101 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253852.851:17134): pid=116101 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253852.854:17135): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253852.854:17136): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253852.895:17137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253852.895:17138): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253852.937:17139): pid=116117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253852.938:17140): pid=116117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A75746367766E757A61777577706263686F7973747571626A6773796C7666203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253852.938:17141): pid=116117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253852.939:17142): pid=116117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253853.096:17143): pid=116117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253853.097:17144): pid=116117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253853.101:17145): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253853.101:17146): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253853.142:17147): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253853.142:17148): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253853.187:17149): pid=116149 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253853.188:17150): pid=116149 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68636D6A71686B6D66687661626E687A6F6A6F6167776E697076726279637463203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253853.188:17151): pid=116149 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253853.191:17152): pid=116149 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253853.266:17153): pid=115940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=115941 suid=74 rport=58764 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253853.267:17154): pid=115940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=115941 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253853.268:17155): pid=115940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=115940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253853.268:17156): pid=115940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253853.398:17157): pid=116149 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253853.399:17158): pid=116149 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253853.402:17159): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253853.402:17160): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253853.443:17161): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253853.443:17162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253853.502:17163): pid=116173 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253853.502:17164): pid=116173 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A76797A6E636C7777687272656A727A766E69616A62687079696E71646873203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253853.503:17165): pid=116173 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253853.508:17166): pid=116173 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253853.518:17167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253853.707:17168): pid=116173 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253853.708:17169): pid=116173 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253853.713:17170): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253853.713:17171): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253853.751:17172): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253853.751:17173): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253853.824:17174): pid=116216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253853.824:17175): pid=116216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6F757169626F6269617965746A616E69696A707A7A746F6464787A64676E79203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253853.825:17176): pid=116216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253853.830:17177): pid=116216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253853.851:17178): pid=114264 uid=0 auid=0 ses=19 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1781253853.851:17179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253853.881:17180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253853.882:17181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253854.012:17182): pid=116216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253854.012:17183): pid=116216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253854.016:17184): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253854.016:17185): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253854.057:17186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253854.057:17187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253854.120:17188): pid=116250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253854.120:17189): pid=116250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73696B656D68627762786A6370616E627A64696E74616362756366736C787663203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253854.121:17190): pid=116250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253854.124:17191): pid=116250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253854.301:17192): pid=116250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253854.301:17193): pid=116250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253854.305:17194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253854.305:17195): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253854.346:17196): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253854.346:17197): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253854.409:17198): pid=116275 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253854.409:17199): pid=116275 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6378696C63686E71746E7A736B6679686470657267627778746A727964636675203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253854.416:17200): pid=116275 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253854.418:17201): pid=116275 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253854.581:17202): pid=116275 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253854.582:17203): pid=116275 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253854.586:17204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253854.586:17205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253854.596:17206): pid=116278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=116278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253854.598:17207): pid=116252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=116278 suid=74 rport=11898 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253854.598:17208): pid=116252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=116278 suid=74 rport=11898 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253854.627:17209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253854.628:17210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253854.699:17211): pid=116292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253854.699:17212): pid=116292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617974687461626F71627A657962626C79697871647964716165736562627362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253854.700:17213): pid=116292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253854.702:17214): pid=116292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253854.884:17215): pid=116292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253854.885:17216): pid=116292 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253854.888:17217): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253854.888:17218): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253854.932:17219): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253854.932:17220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253854.984:17221): pid=116357 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253854.984:17222): pid=116357 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A61636C7A73676C786C64667970706B6A6B786C76646A676766687A69746B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253854.985:17223): pid=116357 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253854.988:17224): pid=116357 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.188:17225): pid=116357 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253855.188:17226): pid=116357 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.192:17227): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253855.192:17228): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253855.216:17229): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253855.217:17230): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253855.258:17231): pid=116389 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253855.258:17232): pid=116389 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70767969786361696F73717571797564776A7A7676787A73656D6B6867657563203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253855.259:17233): pid=116389 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253855.262:17234): pid=116389 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.423:17235): pid=116389 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253855.423:17236): pid=116389 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.426:17237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253855.426:17238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253855.468:17239): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253855.469:17240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253855.519:17241): pid=116461 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253855.519:17242): pid=116461 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6269787679646C7772696A617461767866747761776C6B706972726B67636367203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253855.520:17243): pid=116461 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253855.524:17244): pid=116461 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.678:17245): pid=116461 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253855.678:17246): pid=116461 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.682:17247): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253855.682:17248): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253855.731:17249): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253855.731:17250): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253855.761:17251): pid=116477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253855.761:17252): pid=116477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6876666D646562746570746E796775756279716A686570766E7274626B6D7766203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253855.762:17253): pid=116477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253855.763:17254): pid=116477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.920:17255): pid=116477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253855.920:17256): pid=116477 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253855.923:17257): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253855.923:17258): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253855.964:17259): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253855.964:17260): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253856.005:17261): pid=116505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253856.006:17262): pid=116505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7274616F6F7768746677617073747972676F61756876766C7067757062747872203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253856.006:17263): pid=116505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253856.025:17264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253856.030:17265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253856.033:17266): pid=116505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253856.180:17267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253856.201:17268): pid=116252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="david" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253856.235:17269): pid=116505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253856.235:17270): pid=116505 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253856.239:17271): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253856.239:17272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253856.278:17273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253856.285:17274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253856.285:17275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253856.338:17276): pid=116628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253856.338:17277): pid=116628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68617A63726A6B6167706A776C79796469716F706268776A6A6276686370736C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253856.338:17278): pid=116628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253856.341:17279): pid=116628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253856.491:17280): pid=116628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253856.491:17281): pid=116628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253856.495:17282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253856.495:17283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253856.547:17284): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253856.547:17285): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253856.611:17286): pid=116652 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253856.612:17287): pid=116652 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7A7967676D776F6D63686465736E71647762636C746C64696D756564706E6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253856.612:17288): pid=116652 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253856.615:17289): pid=116652 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253856.806:17290): pid=116652 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253856.806:17291): pid=116652 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253856.811:17292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253856.811:17293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253856.855:17294): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253856.855:17295): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253856.895:17296): pid=116674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253856.896:17297): pid=116674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7569787A636F6D706C756E686B7468746F686C697564687861666C6871757366203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253856.896:17298): pid=116674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253856.898:17299): pid=116674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.042:17300): pid=116674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253857.043:17301): pid=116674 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.047:17302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253857.047:17303): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253857.098:17304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253857.098:17305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253857.138:17306): pid=116710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253857.138:17307): pid=116710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6C67706D777A6B76616F75667567656C74796C7661626B6A6F6D75766B6763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253857.139:17308): pid=116710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253857.140:17309): pid=116710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.283:17310): pid=116710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253857.283:17311): pid=116710 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.288:17312): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253857.288:17313): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253857.331:17314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253857.331:17315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253857.381:17316): pid=116743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253857.382:17317): pid=116743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61727963696C676775766261766D6261626A646965696574736D6B73736B6265203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253857.383:17318): pid=116743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253857.386:17319): pid=116743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.572:17320): pid=116743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253857.572:17321): pid=116743 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.575:17322): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253857.575:17323): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253857.614:17324): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253857.614:17325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253857.655:17326): pid=116799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253857.656:17327): pid=116799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A617566676778726272687174636C636E7170617374767666667269676E6C73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253857.656:17328): pid=116799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253857.661:17329): pid=116799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.836:17330): pid=116799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253857.836:17331): pid=116799 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253857.840:17332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253857.840:17333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253857.882:17334): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253857.882:17335): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253857.925:17336): pid=116860 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253857.926:17337): pid=116860 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7262787A6F727474797862787877796F76616368756B687271636D6576667273203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253857.927:17338): pid=116860 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253857.930:17339): pid=116860 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253858.081:17340): pid=116860 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253858.081:17341): pid=116860 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253858.084:17342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253858.084:17343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253858.126:17344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253858.126:17345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253858.169:17346): pid=116895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253858.170:17347): pid=116895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757676756D7A687668646F707871796C6B667A6B7A6D6174766E646A70747861203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253858.171:17348): pid=116895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253858.174:17349): pid=116895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253858.362:17350): pid=116895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253858.362:17351): pid=116895 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253858.366:17352): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253858.366:17353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253858.408:17354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253858.408:17355): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253858.459:17356): pid=116919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253858.459:17357): pid=116919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7964776B636E626D74666F70686F7977676C7A796F63747A7377657063656B6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253858.460:17358): pid=116919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253858.462:17359): pid=116919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253858.626:17360): pid=116919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253858.626:17361): pid=116919 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253858.631:17362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253858.631:17363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253858.673:17364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253858.673:17365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253858.733:17366): pid=116938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253858.735:17367): pid=116938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E7165716164696A6C6D736B7A6D6A6C657A64646676726772716D66786871203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253858.735:17368): pid=116938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253858.738:17369): pid=116938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253858.759:17370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253858.910:17371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253858.925:17372): pid=116252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=116278 suid=74 rport=11898 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253858.925:17373): pid=116938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253858.926:17374): pid=116938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253858.927:17375): pid=116252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=116278 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253858.927:17376): pid=116252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=116252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253858.927:17377): pid=116252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253858.930:17378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253858.930:17379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253858.971:17380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253858.971:17381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253859.019:17382): pid=116996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253859.019:17383): pid=116996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B696E74616F70706F73726F716170776F6E6B72616869656677776A73697763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253859.021:17384): pid=116996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253859.024:17385): pid=116996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253859.038:17386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253859.101:17387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253859.177:17388): pid=116996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253859.177:17389): pid=116996 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253859.181:17390): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253859.181:17391): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253859.217:17392): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253859.217:17393): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253859.254:17394): pid=117034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253859.255:17395): pid=117034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75736F6F616D7A6A676B6C707064736575746270687368646D66676B70776877203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253859.255:17396): pid=117034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253859.257:17397): pid=117034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253859.304:17398): pid=117037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=117037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253859.306:17399): pid=117000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=117037 suid=74 rport=11916 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253859.306:17400): pid=117000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=117037 suid=74 rport=11916 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253859.400:17401): pid=117034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253859.400:17402): pid=117034 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253859.405:17403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253859.405:17404): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253859.447:17405): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253859.447:17406): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253859.511:17407): pid=117100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253859.511:17408): pid=117100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616162686B67786F736861716B63696B68696179636F6D646169796168676E67203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253859.513:17409): pid=117100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253859.515:17410): pid=117100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253859.652:17411): pid=117100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253859.653:17412): pid=117100 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253859.657:17413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253859.657:17414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253859.699:17415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253859.699:17416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253859.769:17417): pid=117128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253859.769:17418): pid=117128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7274696C7A706A617A76706D7267776F6F68667569627572626B696665646974203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253859.770:17419): pid=117128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253859.773:17420): pid=117128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253859.937:17421): pid=117128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253859.937:17422): pid=117128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253859.941:17423): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253859.941:17424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253859.983:17425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253859.983:17426): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253860.029:17427): pid=117146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253860.030:17428): pid=117146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F7678706E61627A786F717A6569717570716671637A6C6E6F6568756E7479203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253860.030:17429): pid=117146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253860.033:17430): pid=117146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253860.180:17431): pid=117146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253860.181:17432): pid=117146 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253860.184:17433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253860.184:17434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253860.226:17435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253860.226:17436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253860.290:17437): pid=117178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253860.290:17438): pid=117178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747262627A756472737A6A7875787A706A78737577767667766373736C76726D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253860.290:17439): pid=117178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253860.292:17440): pid=117178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253860.499:17441): pid=117178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253860.499:17442): pid=117178 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253860.503:17443): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253860.503:17444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253860.533:17445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253860.533:17446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253860.594:17447): pid=117202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253860.595:17448): pid=117202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787763646B7777786471726D72696C74736478796D696468757064716E6C7072203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253860.595:17449): pid=117202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253860.598:17450): pid=117202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253860.926:17451): pid=117202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253860.926:17452): pid=117202 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253860.931:17453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253860.932:17454): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253860.932:17455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253860.973:17456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253860.973:17457): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253861.042:17458): pid=117218 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253861.042:17459): pid=117218 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65646A6D6D726B6273706F72736466736E787668716D66656465706377776374203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253861.043:17460): pid=117218 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253861.047:17461): pid=117218 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253861.140:17462): pid=117000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ch" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253861.229:17463): pid=117218 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253861.229:17464): pid=117218 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253861.233:17465): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253861.233:17466): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253861.275:17467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253861.275:17468): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253861.320:17469): pid=117250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253861.321:17470): pid=117250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777062797A746F65786C7A71617A776A6C6C70657A63797A6466626A69737963203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253861.322:17471): pid=117250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253861.325:17472): pid=117250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253861.501:17473): pid=117250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253861.501:17474): pid=117250 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253861.505:17475): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253861.505:17476): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253861.547:17477): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253861.547:17478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253861.605:17479): pid=117274 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253861.606:17480): pid=117274 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A6262706E787279716A6462786F66696975696E707069706F7A6D706B7577203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253861.606:17481): pid=117274 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253861.609:17482): pid=117274 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253861.804:17483): pid=117274 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253861.805:17484): pid=117274 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253861.809:17485): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253861.809:17486): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253861.850:17487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253861.850:17488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253861.909:17489): pid=117291 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253861.910:17490): pid=117291 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79766163636565627A7371756A706D66676C7678776D616872677A7575786878203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253861.910:17491): pid=117291 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253861.913:17492): pid=117291 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253862.069:17493): pid=117291 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253862.069:17494): pid=117291 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253862.073:17495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253862.073:17496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253862.105:17497): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253862.105:17498): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253862.162:17499): pid=117310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253862.163:17500): pid=117310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747174706C716C7561766C71646F766277796771786F6872636C78646769686C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253862.163:17501): pid=117310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253862.166:17502): pid=117310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253862.333:17503): pid=117310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253862.333:17504): pid=117310 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253862.337:17505): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253862.337:17506): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253862.379:17507): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253862.379:17508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253862.418:17509): pid=117339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253862.418:17510): pid=117339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736776796D636B6574746873637071696C6978796F6D61667873697663707A76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253862.419:17511): pid=117339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253862.421:17512): pid=117339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253862.434:17513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253862.578:17514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253862.602:17515): pid=117339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253862.602:17516): pid=117339 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253862.606:17517): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253862.606:17518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253862.647:17519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253862.647:17520): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253862.698:17521): pid=117382 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253862.699:17522): pid=117382 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7362747A796C73706B6262716E62776D6E6F717A76786A706968616B6F677772203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253862.699:17523): pid=117382 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253862.703:17524): pid=117382 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253862.905:17525): pid=117382 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253862.905:17526): pid=117382 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253862.908:17527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253862.908:17528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253862.949:17529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253862.949:17530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253862.994:17531): pid=117398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253862.995:17532): pid=117398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636577676466776F7A6F6A6D75797A7464776C6771686C767A6C7A6B6C6E6F73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253862.995:17533): pid=117398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253862.997:17534): pid=117398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253863.163:17535): pid=117398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253863.163:17536): pid=117398 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253863.169:17537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253863.171:17538): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253863.171:17539): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253863.210:17540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253863.210:17541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253863.258:17542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253863.281:17543): pid=117446 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253863.281:17544): pid=117446 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70646D786265756968656169796A6D6C636A6C73706C6E687969737A706A6873203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253863.282:17545): pid=117446 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253863.285:17546): pid=117446 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253863.313:17547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253863.316:17548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253863.364:17549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253863.414:17550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253863.446:17551): pid=117446 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253863.446:17552): pid=117446 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253863.449:17553): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253863.449:17554): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253863.478:17555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253863.482:17556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253863.482:17557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253863.534:17558): pid=117547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253863.534:17559): pid=117547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63796D796876626A74706E617772757273766E7277666475727A63676F6F6E66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253863.535:17560): pid=117547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253863.539:17561): pid=117547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253863.632:17562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253863.654:17563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253863.712:17564): pid=117547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253863.713:17565): pid=117547 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253863.716:17566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253863.716:17567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253863.766:17568): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253863.766:17569): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253863.785:17570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253863.833:17571): pid=117606 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253863.833:17572): pid=117606 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7672766E637565797766656466746B6C656678726B7175796A6678746F6175203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253863.834:17573): pid=117606 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253863.836:17574): pid=117606 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.008:17575): pid=117606 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253864.009:17576): pid=117606 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.013:17577): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253864.013:17578): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253864.058:17579): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253864.058:17580): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253864.108:17581): pid=117622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253864.109:17582): pid=117622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C747A6B6E667A666E726D62667770776465786762766764776767656C687A63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253864.109:17583): pid=117622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253864.112:17584): pid=117622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.266:17585): pid=117622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253864.267:17586): pid=117622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.271:17587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253864.271:17588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253864.314:17589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253864.314:17590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253864.381:17591): pid=117654 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253864.381:17592): pid=117654 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C746A6C626E6B68726D6E7965717261787175646A75726F6D696F7866756478203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253864.381:17593): pid=117654 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253864.383:17594): pid=117654 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.556:17595): pid=117654 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253864.556:17596): pid=117654 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.561:17597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253864.561:17598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253864.608:17599): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253864.608:17600): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253864.657:17601): pid=117678 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253864.658:17602): pid=117678 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72636B706C64646B776B707171697A7069776968636773626B7163746D626773203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253864.658:17603): pid=117678 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253864.661:17604): pid=117678 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.840:17605): pid=117678 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253864.840:17606): pid=117678 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253864.844:17607): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253864.844:17608): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253864.892:17609): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253864.892:17610): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253864.946:17611): pid=117694 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253864.947:17612): pid=117694 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666978706D796C66696D62786963727170706776637864707768717561776A75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253864.947:17613): pid=117694 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253864.950:17614): pid=117694 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253864.970:17615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253865.098:17616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253865.115:17617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253865.150:17618): pid=117694 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253865.151:17619): pid=117694 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253865.155:17620): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253865.155:17621): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253865.197:17622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253865.197:17623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253865.253:17624): pid=117000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=117037 suid=74 rport=11916 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253865.254:17625): pid=117000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=117037 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253865.255:17626): pid=117000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=117000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253865.255:17627): pid=117000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253865.267:17628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253865.268:17629): pid=117752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253865.269:17630): pid=117752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C706B6A6B6F63746467727269677A6D6F6D6F73656C6E6E626175636E64666B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253865.269:17631): pid=117752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253865.272:17632): pid=117752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253865.446:17633): pid=117752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253865.446:17634): pid=117752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253865.450:17635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253865.450:17636): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253865.495:17637): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253865.495:17638): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253865.537:17639): pid=117826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253865.537:17640): pid=117826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7365627A747564786B6F76786D736F7563636562696B6A7A7375666E6E757965203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253865.538:17641): pid=117826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253865.540:17642): pid=117826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253865.679:17643): pid=117837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=117837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253865.680:17644): pid=117771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=117837 suid=74 rport=46774 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253865.680:17645): pid=117771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=117837 suid=74 rport=46774 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253865.683:17646): pid=117826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253865.684:17647): pid=117826 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253865.687:17648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253865.687:17649): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253865.728:17650): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253865.728:17651): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253865.794:17652): pid=117851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253865.795:17653): pid=117851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A68786E6D7969736962667A71646865686F776C6D706469646E637A757274203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253865.795:17654): pid=117851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253865.798:17655): pid=117851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253865.814:17656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253865.937:17657): pid=117851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253865.938:17658): pid=117851 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253865.942:17659): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253865.942:17660): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253865.971:17661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253865.983:17662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253865.983:17663): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253866.033:17664): pid=117886 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253866.033:17665): pid=117886 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6567737675616C626A6D796367706A6C6B7A6F6D75667972737670736A797066203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253866.034:17666): pid=117886 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253866.036:17667): pid=117886 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253866.174:17668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253866.175:17669): pid=117886 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253866.175:17670): pid=117886 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253866.180:17671): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253866.180:17672): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253866.222:17673): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253866.222:17674): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253866.279:17675): pid=117918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253866.279:17676): pid=117918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A797A777179766A786963737964716166686D6D69776D6370746578646268203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253866.280:17677): pid=117918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253866.283:17678): pid=117918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253866.285:17679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253866.433:17680): pid=117918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253866.433:17681): pid=117918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253866.438:17682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253866.438:17683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253866.480:17684): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253866.481:17685): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253866.539:17686): pid=117953 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253866.539:17687): pid=117953 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C776774666C6C65787961636A6F64667372786A6D776D7A617566686B6F6362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253866.540:17688): pid=117953 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253866.544:17689): pid=117953 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253866.561:17690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253866.706:17691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253866.710:17692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253866.730:17693): pid=117953 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253866.731:17694): pid=117953 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253866.735:17695): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253866.735:17696): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253866.788:17697): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253866.788:17698): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253866.846:17699): pid=118029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253866.846:17700): pid=118029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777A6476667176696561667A63756B6C6D64747178656E7473686E746963706D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253866.847:17701): pid=118029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253866.851:17702): pid=118029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253866.864:17703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253866.868:17704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253866.982:17705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253866.996:17706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253867.027:17707): pid=118029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253867.028:17708): pid=118029 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253867.031:17709): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253867.031:17710): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253867.046:17711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253867.062:17712): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253867.062:17713): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253867.102:17714): pid=118117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253867.102:17715): pid=118117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79777366766C65646B6A616470796C70707563627372696F64706D627676687A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253867.103:17716): pid=118117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253867.104:17717): pid=118117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253867.112:17718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253867.257:17719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253867.262:17720): pid=118117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253867.263:17721): pid=118117 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253867.267:17722): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253867.267:17723): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253867.306:17724): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253867.306:17725): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253867.353:17726): pid=118151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253867.354:17727): pid=118151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75756D6F666A736D6775766377637A6B72666B6B616B6C6B787A687A617A7A75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253867.354:17728): pid=118151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253867.356:17729): pid=118151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253867.490:17730): pid=118151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253867.491:17731): pid=118151 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253867.495:17732): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253867.495:17733): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253867.538:17734): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253867.538:17735): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253867.576:17736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253867.578:17737): pid=117771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gczhang" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253867.600:17738): pid=118170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253867.600:17739): pid=118170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A64686976616F68777776686B6E6A69717A767A7973767261736D64746A7664203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253867.601:17740): pid=118170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253867.603:17741): pid=118170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253867.720:17742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253867.759:17743): pid=118170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253867.759:17744): pid=118170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253867.762:17745): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253867.762:17746): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253867.807:17747): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253867.807:17748): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253867.863:17749): pid=118217 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253867.864:17750): pid=118217 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686373776C7475716C6C76706A75637A6A79736B637668616667697361756368203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253867.865:17751): pid=118217 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253867.894:17752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253867.897:17753): pid=118217 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253868.045:17754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253868.074:17755): pid=118217 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253868.074:17756): pid=118217 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253868.077:17757): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253868.078:17758): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253868.122:17759): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253868.122:17760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253868.173:17761): pid=118298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253868.174:17762): pid=118298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64677073636C6A646B74686F7A647066756C766B76737A737670786A7663616E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253868.175:17763): pid=118298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253868.177:17764): pid=118298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253868.332:17765): pid=118298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253868.332:17766): pid=118298 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253868.335:17767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253868.335:17768): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253868.371:17769): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253868.371:17770): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253868.424:17771): pid=118330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253868.424:17772): pid=118330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777672747A6C73616667736F6764626475676F6F716E696E6679676966796864203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253868.425:17773): pid=118330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253868.427:17774): pid=118330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253868.602:17775): pid=118330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253868.602:17776): pid=118330 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253868.606:17777): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253868.606:17778): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253868.652:17779): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253868.653:17780): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253868.714:17781): pid=118350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253868.715:17782): pid=118350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77716569686D766567707A617676676F6472736F787A78726563636A766B6465203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253868.715:17783): pid=118350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253868.718:17784): pid=118350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253868.976:17785): pid=118350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253868.976:17786): pid=118350 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253868.980:17787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253868.980:17788): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253869.023:17789): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253869.023:17790): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253869.077:17791): pid=118372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253869.077:17792): pid=118372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6E7A64696B706C777074677A6B776D6B756976656E696874626F7670637675203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253869.078:17793): pid=118372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253869.081:17794): pid=118372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253869.093:17795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253869.268:17796): pid=118372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253869.268:17797): pid=118372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253869.272:17798): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253869.272:17799): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253869.364:17800): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253869.364:17801): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253869.407:17802): pid=118474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253869.407:17803): pid=118474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B75647176697864746C706F7A6E7079747472716662636A7A6B6D77727576203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253869.408:17804): pid=118474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253869.410:17805): pid=118474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253869.560:17806): pid=118474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253869.561:17807): pid=118474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253869.564:17808): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253869.565:17809): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253869.610:17810): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253869.610:17811): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253869.614:17812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253869.617:17813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253869.659:17814): pid=118555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253869.659:17815): pid=118555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676C746E6F786F63626E7963646865616D6E65766A746F74776A747362696964203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253869.659:17816): pid=118555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253869.661:17817): pid=118555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253869.794:17818): pid=118555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253869.794:17819): pid=118555 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253869.798:17820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253869.798:17821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253869.839:17822): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253869.839:17823): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253869.847:17824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253869.886:17825): pid=118608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253869.887:17826): pid=118608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B6A656B726A63726F786F706D6D7961717861617973676F667661656A666B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253869.887:17827): pid=118608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253869.890:17828): pid=118608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253869.972:17829): pid=117771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=117837 suid=74 rport=46774 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253869.973:17830): pid=117771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=117837 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253869.974:17831): pid=117771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=117771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253869.974:17832): pid=117771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253870.035:17833): pid=118608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253870.035:17834): pid=118608 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253870.040:17835): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253870.040:17836): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253870.081:17837): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253870.081:17838): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253870.135:17839): pid=118628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253870.135:17840): pid=118628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7661647679726E7365736B696378637476617873636D7370656468647A726569203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253870.135:17841): pid=118628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253870.138:17842): pid=118628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253870.310:17843): pid=118640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=118640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253870.312:17844): pid=118614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=118640 suid=74 rport=46782 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253870.312:17845): pid=118614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=118640 suid=74 rport=46782 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253870.322:17846): pid=118628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253870.322:17847): pid=118628 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253870.326:17848): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253870.326:17849): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253870.368:17850): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253870.368:17851): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253870.426:17852): pid=118662 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253870.427:17853): pid=118662 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73627763787777777173787566716565736E7475716F63716E6A69687869796B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253870.427:17854): pid=118662 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253870.432:17855): pid=118662 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253870.439:17856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253870.442:17857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253870.615:17858): pid=118662 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253870.615:17859): pid=118662 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253870.618:17860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253870.618:17861): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253870.660:17862): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253870.660:17863): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253870.691:17864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253870.698:17865): pid=118792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253870.699:17866): pid=118792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E6F6E79796761656968766B676F6F64636C7A79716D736C78666179767471203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253870.699:17867): pid=118792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253870.701:17868): pid=118792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253870.762:17869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253870.765:17870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253870.844:17871): pid=118792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253870.845:17872): pid=118792 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253870.848:17873): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253870.848:17874): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253870.891:17875): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253870.891:17876): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253870.932:17877): pid=118869 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253870.932:17878): pid=118869 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77766A7170677862776E6A6C787A6578766A7A73697061747464776173656862203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253870.933:17879): pid=118869 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253870.936:17880): pid=118869 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253871.080:17881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253871.166:17882): pid=118869 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253871.166:17883): pid=118869 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253871.170:17884): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253871.170:17885): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253871.200:17886): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253871.200:17887): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253871.251:17888): pid=118898 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253871.251:17889): pid=118898 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636369776567676A776D6E69627A6978647A7375616E797366747866696B697A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253871.251:17890): pid=118898 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253871.254:17891): pid=118898 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253871.438:17892): pid=118898 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253871.438:17893): pid=118898 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253871.441:17894): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253871.441:17895): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253871.483:17896): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253871.483:17897): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253871.531:17898): pid=118930 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253871.531:17899): pid=118930 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6376676B7361786E6977746D6C79676A6B65756A6B6C746E696871666A626575203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253871.531:17900): pid=118930 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253871.534:17901): pid=118930 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253871.712:17902): pid=118930 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253871.712:17903): pid=118930 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253871.716:17904): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253871.716:17905): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253871.759:17906): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253871.759:17907): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253871.808:17908): pid=119003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253871.809:17909): pid=119003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B78676D7175796C786C73647169666D6A7766647A6E65696376656D6279686A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253871.809:17910): pid=119003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253871.812:17911): pid=119003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253871.823:17912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253871.902:17913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253871.961:17914): pid=119003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253871.961:17915): pid=119003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253871.965:17916): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253871.965:17917): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253872.000:17918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253872.007:17919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253872.007:17920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253872.044:17921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253872.049:17922): pid=119065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253872.049:17923): pid=119065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F7170776D767765766F6E646564677879636F7063736C756F666D6A73686B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253872.049:17924): pid=119065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253872.051:17925): pid=119065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253872.103:17926): pid=118614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="mapr" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253872.189:17927): pid=119065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253872.189:17928): pid=119065 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253872.192:17929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253872.192:17930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253872.237:17931): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253872.237:17932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253872.305:17933): pid=119084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253872.305:17934): pid=119084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7064616F7579747A6E637566746D677A746173696D65736E736F6D6B666A70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253872.306:17935): pid=119084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253872.309:17936): pid=119084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253872.471:17937): pid=119084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253872.472:17938): pid=119084 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253872.476:17939): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253872.476:17940): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253872.519:17941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253872.519:17942): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253872.580:17943): pid=119177 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253872.580:17944): pid=119177 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69776578646A6B676874656F77706F7673646C757067716B696E66686669766A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253872.580:17945): pid=119177 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253872.583:17946): pid=119177 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253872.611:17947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253872.750:17948): pid=119177 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253872.750:17949): pid=119177 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253872.753:17950): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253872.753:17951): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253872.783:17952): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253872.783:17953): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253872.821:17954): pid=119255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253872.821:17955): pid=119255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66616465707375667A786876726F636C6865636977627870736C617278636368203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253872.822:17956): pid=119255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253872.824:17957): pid=119255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253872.962:17958): pid=119255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253872.962:17959): pid=119255 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253872.967:17960): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253872.967:17961): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253872.983:17962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253873.005:17963): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253873.005:17964): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253873.032:17965): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253873.032:17966): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253873.067:17967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253873.074:17968): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253873.074:17969): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253873.109:17970): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253873.109:17971): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253873.324:17972): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253873.324:17973): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253873.370:17974): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253873.370:17975): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253873.412:17976): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253873.412:17977): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253873.482:17978): pid=119387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253873.483:17979): pid=119387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D726C62666E67666179706B66786F6E6469636969627875717677626E677672203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253873.485:17980): pid=119387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253873.490:17981): pid=119387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253873.566:17982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253873.670:17983): pid=119387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253873.670:17984): pid=119387 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253873.674:17985): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253873.674:17986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253873.855:17987): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253873.855:17988): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253873.895:17989): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253873.895:17990): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253873.936:17991): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253873.936:17992): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253874.001:17993): pid=119441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253874.001:17994): pid=119441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7869687A776C676763787A6B746D657777746A7976666B6F6B74727675786165203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253874.001:17995): pid=119441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253874.005:17996): pid=119441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253874.029:17997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253874.197:17998): pid=119441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253874.197:17999): pid=119441 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253874.201:18000): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253874.201:18001): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253874.211:18002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253874.420:18003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253874.420:18004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253874.458:18005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253874.458:18006): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253874.499:18007): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253874.499:18008): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253874.572:18009): pid=119509 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253874.573:18010): pid=119509 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E716B706279737179626767666671787177746870787670746D6E7A65726C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253874.575:18011): pid=119509 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253874.579:18012): pid=119509 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253874.765:18013): pid=119509 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253874.765:18014): pid=119509 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253874.770:18015): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253874.770:18016): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253874.991:18017): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253874.991:18018): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253875.033:18019): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253875.033:18020): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253875.086:18021): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253875.086:18022): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253875.151:18023): pid=119548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253875.152:18024): pid=119548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A786F74756B6C6A69686C6E796F6874656E786B6C6963726C6E7A726D707168203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253875.153:18025): pid=119548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253875.157:18026): pid=119548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253875.170:18027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253875.173:18028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253875.176:18029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253875.185:18030): pid=118614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118640 suid=74 rport=46782 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253875.186:18031): pid=118614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=118640 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253875.187:18032): pid=118614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=118614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253875.188:18033): pid=118614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253875.360:18034): pid=119548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253875.361:18035): pid=119548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253875.367:18036): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253875.367:18037): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253875.371:18038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253875.384:18039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253875.399:18040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253875.403:18041): pid=119631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=119631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253875.404:18042): pid=119592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=119631 suid=74 rport=45770 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253875.404:18043): pid=119592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=119631 suid=74 rport=45770 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253875.453:18044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253875.456:18045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253875.556:18046): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253875.557:18047): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253875.595:18048): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253875.595:18049): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253875.637:18050): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253875.637:18051): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253875.693:18052): pid=119755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253875.694:18053): pid=119755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6765686672686374676D637A77727A6A6F756F69646C6765726D756E66646878203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253875.695:18054): pid=119755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253875.703:18055): pid=119755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253875.718:18056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253875.774:18057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253875.892:18058): pid=119755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253875.892:18059): pid=119755 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253875.897:18060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253875.897:18061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253876.077:18062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253876.077:18063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253876.118:18064): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253876.119:18065): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253876.160:18066): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253876.160:18067): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253876.181:18068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253876.240:18069): pid=119803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253876.241:18070): pid=119803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6467666F777071626C62787872786D6B796378716961616D6F72776374706C72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253876.241:18071): pid=119803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253876.245:18072): pid=119803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253876.416:18073): pid=119803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253876.416:18074): pid=119803 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253876.421:18075): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253876.421:18076): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253876.568:18077): pid=119592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="liuli" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253876.609:18078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253876.640:18079): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253876.640:18080): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253876.683:18081): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253876.683:18082): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253876.726:18083): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253876.726:18084): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253876.796:18085): pid=119870 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253876.797:18086): pid=119870 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A78767763756E7267626B797A676A77656E7664726976677668767161706466203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253876.799:18087): pid=119870 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253876.804:18088): pid=119870 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253876.967:18089): pid=119870 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253876.967:18090): pid=119870 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253876.971:18091): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253876.971:18092): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253877.176:18093): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253877.177:18094): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253877.221:18095): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253877.221:18096): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253877.263:18097): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253877.263:18098): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253877.329:18099): pid=119907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253877.329:18100): pid=119907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F7064676874656266647A6E6E65786D71676E7A7074726B67736C7A6D6977203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253877.330:18101): pid=119907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253877.332:18102): pid=119907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253877.511:18103): pid=119907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253877.511:18104): pid=119907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253877.517:18105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253877.517:18106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253877.724:18107): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253877.724:18108): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253877.755:18109): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253877.755:18110): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253877.804:18111): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253877.805:18112): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253877.869:18113): pid=119952 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253877.870:18114): pid=119952 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7672707A666A636F6D797571787A677671736B61766970747072697377736A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253877.870:18115): pid=119952 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253877.874:18116): pid=119952 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253878.111:18117): pid=119952 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253878.111:18118): pid=119952 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253878.115:18119): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253878.115:18120): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253878.330:18121): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253878.330:18122): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253878.367:18123): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253878.367:18124): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253878.410:18125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253878.410:18126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253878.461:18127): pid=120030 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253878.461:18128): pid=120030 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6E7A636B736C77647A6968736674736E70716A6F6E79717869697A6C6D64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253878.462:18129): pid=120030 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253878.467:18130): pid=120030 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253878.479:18131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253878.483:18132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253878.602:18133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253878.675:18134): pid=120030 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253878.675:18135): pid=120030 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253878.679:18136): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253878.679:18137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253878.732:18138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253878.881:18139): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253878.881:18140): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253878.930:18141): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253878.930:18142): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253878.973:18143): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253878.973:18144): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253879.050:18145): pid=120126 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253879.050:18146): pid=120126 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62766666646E6368767973616A6A72696273776B71687872676F6A62756C7976203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253879.051:18147): pid=120126 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253879.056:18148): pid=120126 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253879.175:18149): pid=119592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=119631 suid=74 rport=45770 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253879.177:18150): pid=119592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=119631 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253879.178:18151): pid=119592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=119592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253879.178:18152): pid=119592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253879.246:18153): pid=120126 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253879.247:18154): pid=120126 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253879.251:18155): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253879.251:18156): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253879.460:18157): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253879.460:18158): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253879.500:18159): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253879.501:18160): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253879.542:18161): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253879.542:18162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253879.609:18163): pid=120156 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253879.610:18164): pid=120156 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B706B69776B736769616678626363736C6D75696A617563636F756F6D6A62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253879.611:18165): pid=120156 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253879.616:18166): pid=120156 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253879.756:18167): pid=120228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253879.758:18168): pid=120140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=120228 suid=74 rport=45776 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253879.758:18169): pid=120140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=120228 suid=74 rport=45776 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253879.803:18170): pid=120156 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253879.803:18171): pid=120156 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253879.806:18172): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253879.806:18173): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253880.022:18174): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253880.022:18175): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253880.062:18176): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253880.062:18177): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253880.105:18178): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253880.105:18179): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253880.164:18180): pid=120323 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253880.164:18181): pid=120323 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F656D7A717A6977796175677A656C797A766C756979687162616164736772203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253880.165:18182): pid=120323 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253880.167:18183): pid=120323 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253880.336:18184): pid=120323 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253880.337:18185): pid=120323 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253880.342:18186): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253880.343:18187): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253880.561:18188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253880.561:18189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253880.599:18190): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253880.599:18191): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253880.649:18192): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253880.649:18193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253880.683:18194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253880.723:18195): pid=120360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253880.724:18196): pid=120360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7467706A7366696F6275786B637671716D61686B6670746F76647670677569203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253880.725:18197): pid=120360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253880.729:18198): pid=120360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253880.830:18199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253880.926:18200): pid=120360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253880.926:18201): pid=120360 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253880.932:18202): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253880.932:18203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253881.072:18204): pid=120140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="caojinxin" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253881.157:18205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253881.157:18206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253881.194:18207): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253881.194:18208): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253881.245:18209): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253881.245:18210): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253881.302:18211): pid=120429 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253881.302:18212): pid=120429 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7165686F6265676A75736E72787963766267627179666A706364696B6B757166203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253881.303:18213): pid=120429 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253881.306:18214): pid=120429 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253881.523:18215): pid=120429 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253881.523:18216): pid=120429 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253881.527:18217): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253881.527:18218): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253881.754:18219): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253881.754:18220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253881.790:18221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253881.790:18222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253881.837:18223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253881.838:18224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253881.900:18225): pid=120474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253881.900:18226): pid=120474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A636D67746D797362626D6C646A63647A69647A7A757762747163737079796D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253881.901:18227): pid=120474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253881.904:18228): pid=120474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253882.088:18229): pid=120474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253882.090:18230): pid=120474 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253882.093:18231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253882.093:18232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253882.314:18233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253882.314:18234): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253882.356:18235): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253882.357:18236): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253882.404:18237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253882.404:18238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253882.469:18239): pid=120511 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253882.469:18240): pid=120511 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F656E6B72706868656D6C6D6268796E6B65657070716279647763726469616D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253882.469:18241): pid=120511 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253882.472:18242): pid=120511 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253882.655:18243): pid=120511 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253882.656:18244): pid=120511 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253882.661:18245): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253882.661:18246): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253882.899:18247): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253882.899:18248): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253882.941:18249): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253882.941:18250): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253882.988:18251): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253882.988:18252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253883.055:18253): pid=120556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253883.056:18254): pid=120556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77726E6C6A626B6765676C6D627565766F65796179757A6672716E7266727763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253883.056:18255): pid=120556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253883.059:18256): pid=120556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253883.192:18257): pid=120140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120228 suid=74 rport=45776 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253883.193:18258): pid=120140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120228 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253883.194:18259): pid=120140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253883.194:18260): pid=120140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781253883.245:18261): pid=120556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253883.246:18262): pid=120556 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253883.250:18263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253883.250:18264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253883.487:18265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253883.487:18266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253883.524:18267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253883.524:18268): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253883.570:18269): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253883.570:18270): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253883.626:18271): pid=120600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253883.627:18272): pid=120567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=120600 suid=74 rport=44120 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253883.627:18273): pid=120567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=120600 suid=74 rport=44120 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1781253883.634:18274): pid=120594 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253883.634:18275): pid=120594 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746B756E7A6D757169777967626762617368657374746E62736E7970646E7577203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253883.636:18276): pid=120594 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253883.638:18277): pid=120606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_START msg=audit(1781253883.640:18278): pid=120594 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253883.823:18279): pid=120594 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253883.823:18280): pid=120594 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253883.827:18281): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253883.827:18282): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253884.021:18283): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253884.021:18284): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253884.054:18285): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253884.054:18286): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253884.102:18287): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253884.102:18288): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253884.157:18289): pid=120691 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253884.158:18290): pid=120691 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78696F6B7A7675716D647762746670636763646E6F786E7877706D7878616164203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253884.160:18291): pid=120691 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253884.177:18292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253884.181:18293): pid=120691 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253884.375:18294): pid=120691 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253884.375:18295): pid=120691 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253884.379:18296): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253884.379:18297): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253884.550:18298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253884.593:18299): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253884.593:18300): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253884.625:18301): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253884.625:18302): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253884.667:18303): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253884.667:18304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253884.724:18305): pid=120765 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253884.725:18306): pid=120765 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71676B787375677078766B716F637675686F6F776778736D7967727665766677203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253884.725:18307): pid=120765 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253884.727:18308): pid=120765 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253884.900:18309): pid=120765 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253884.900:18310): pid=120765 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253884.903:18311): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253884.903:18312): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253885.082:18313): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253885.082:18314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253885.120:18315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253885.120:18316): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253885.165:18317): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253885.165:18318): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253885.213:18319): pid=120832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253885.213:18320): pid=120832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636C647174626A657769647A70676A6B7168736A6F696E6175717A7961626B72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253885.213:18321): pid=120832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253885.216:18322): pid=120832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253885.408:18323): pid=120832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253885.408:18324): pid=120832 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253885.411:18325): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253885.411:18326): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253885.489:18327): pid=120567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="reese" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253885.622:18328): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253885.622:18329): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253885.662:18330): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253885.662:18331): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253885.710:18332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253885.710:18333): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253885.771:18334): pid=120942 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253885.771:18335): pid=120942 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657375796F6262667768627566656C7473746364616867686F616B6D61747170203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253885.772:18336): pid=120942 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253885.775:18337): pid=120942 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253885.983:18338): pid=120942 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253885.984:18339): pid=120942 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253885.987:18340): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253885.987:18341): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253886.196:18342): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253886.196:18343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253886.228:18344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253886.228:18345): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253886.270:18346): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253886.270:18347): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253886.318:18348): pid=121051 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253886.318:18349): pid=121051 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756D7A766F656472616B656D6572796A747876706C7766757071616C62786769203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253886.319:18350): pid=121051 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253886.342:18351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253886.346:18352): pid=121051 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253886.349:18353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253886.478:18354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253886.508:18355): pid=121051 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253886.508:18356): pid=121051 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253886.511:18357): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253886.511:18358): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781253886.544:18359): pid=120598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=120606 suid=74 rport=53672 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253886.544:18360): pid=120598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=120606 suid=74 rport=53672 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781253886.564:18361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253886.699:18362): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253886.699:18363): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253886.742:18364): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253886.742:18365): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253886.784:18366): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253886.784:18367): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253886.845:18368): pid=121129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253886.845:18369): pid=121129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C6A626D70707165636A61627A736B6F736364777372646461707464746967203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253886.845:18370): pid=121129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253886.848:18371): pid=121129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253887.048:18372): pid=121129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253887.049:18373): pid=121129 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253887.053:18374): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253887.053:18375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253887.230:18376): pid=120598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253887.259:18377): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253887.259:18378): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253887.292:18379): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253887.292:18380): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253887.332:18381): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253887.333:18382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253887.391:18383): pid=121187 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253887.391:18384): pid=121187 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6374626374796A7165756E716178716B75706178617A75637A656A6B72727068203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253887.392:18385): pid=121187 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253887.395:18386): pid=121187 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253887.594:18387): pid=121194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121194 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781253887.622:18388): pid=121187 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253887.624:18389): pid=121187 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253887.628:18390): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253887.628:18391): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253887.749:18392): pid=120567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120600 suid=74 rport=44120 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253887.749:18393): pid=120567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120600 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253887.750:18394): pid=120567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120567 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253887.750:18395): pid=120567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253887.825:18396): pid=121193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=121194 suid=74 rport=16274 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253887.825:18397): pid=121193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=121194 suid=74 rport=16274 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253887.857:18398): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253887.857:18399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253887.894:18400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253887.894:18401): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253887.938:18402): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253887.938:18403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253888.001:18404): pid=121239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253888.001:18405): pid=121239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E7A756E6861646B7162746266706C6F65646B7677666C6D76776473646A65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253888.002:18406): pid=121239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253888.006:18407): pid=121239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253888.061:18408): pid=121268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253888.062:18409): pid=121196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=121268 suid=74 rport=44134 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253888.062:18410): pid=121196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=121268 suid=74 rport=44134 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781253888.176:18411): pid=121239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253888.177:18412): pid=121239 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253888.181:18413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253888.181:18414): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253888.400:18415): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253888.400:18416): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253888.430:18417): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253888.430:18418): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253888.472:18419): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253888.472:18420): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253888.517:18421): pid=121318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253888.517:18422): pid=121318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71756E72786168707A6E697964636A6E796D63706B736E7664666A63686A7769203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253888.517:18423): pid=121318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253888.519:18424): pid=121318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253888.671:18425): pid=121318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253888.672:18426): pid=121318 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253888.676:18427): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253888.676:18428): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253888.875:18429): pid=121193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253888.906:18430): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253888.906:18431): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253888.938:18432): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253888.938:18433): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253888.979:18434): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253888.979:18435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253889.034:18436): pid=121364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253889.034:18437): pid=121364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73726579617A7466797564697369647273746967677A6E666A717377686B7674203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253889.035:18438): pid=121364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253889.038:18439): pid=121364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253889.173:18440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253889.177:18441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253889.231:18442): pid=121364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253889.231:18443): pid=121364 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253889.235:18444): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253889.235:18445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253889.383:18446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253889.393:18447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253889.444:18448): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253889.444:18449): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253889.474:18450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253889.474:18451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253889.518:18452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253889.518:18453): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253889.557:18454): pid=121448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253889.557:18455): pid=121448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7461626B65626A6A6F7778716775747479616B70747475696C71736E73717463203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253889.558:18456): pid=121448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253889.560:18457): pid=121448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253889.656:18458): pid=121452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1781253889.718:18459): pid=121448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253889.718:18460): pid=121448 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253889.722:18461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253889.722:18462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781253889.789:18463): pid=121451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=121452 suid=74 rport=46884 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253889.789:18464): pid=121451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=121452 suid=74 rport=46884 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253889.804:18465): pid=121196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ansadmin" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253889.939:18466): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253889.939:18467): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253889.976:18468): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253889.976:18469): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253890.018:18470): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253890.019:18471): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253890.084:18472): pid=121550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253890.085:18473): pid=121550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77636C71646E66686B73646F7375796B6E6E6F6776686C737564646A6C75776E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253890.085:18474): pid=121550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253890.088:18475): pid=121550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253890.269:18476): pid=121550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253890.269:18477): pid=121550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253890.273:18478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253890.273:18479): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253890.519:18480): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253890.519:18481): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253890.552:18482): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253890.553:18483): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253890.594:18484): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253890.594:18485): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253890.640:18486): pid=121587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253890.640:18487): pid=121587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7478726A67626E68656361686C6D686B786D78716B686A7076776363627561203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253890.640:18488): pid=121587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253890.642:18489): pid=121587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253890.799:18490): pid=121587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253890.800:18491): pid=121587 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253890.804:18492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253890.804:18493): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253890.825:18494): pid=121451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="harsha" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253890.908:18495): pid=121193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=121194 suid=74 rport=16274 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253890.908:18496): pid=121193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121194 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253890.910:18497): pid=121193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121193 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253890.910:18498): pid=121193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253891.019:18499): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253891.019:18500): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253891.056:18501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253891.057:18502): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253891.064:18503): pid=120598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120606 suid=74 rport=53672 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253891.064:18504): pid=120598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120606 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253891.066:18505): pid=120598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=120598 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253891.066:18506): pid=120598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253891.101:18507): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253891.101:18508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253891.164:18509): pid=121632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253891.164:18510): pid=121632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676275646E68616F696D7677706B66756F66796377626973786A7574626C6B6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253891.166:18511): pid=121632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253891.169:18512): pid=121632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253891.348:18513): pid=121632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253891.349:18514): pid=121632 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253891.352:18515): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253891.353:18516): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253891.568:18517): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253891.568:18518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253891.601:18519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253891.601:18520): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253891.642:18521): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253891.642:18522): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253891.698:18523): pid=121669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253891.698:18524): pid=121669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61657264727A6572637A747A6B78737A65746A636B62766C776D726679706174203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253891.699:18525): pid=121669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253891.701:18526): pid=121669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253891.873:18527): pid=121669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253891.874:18528): pid=121669 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253891.878:18529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253891.878:18530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253892.104:18531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253892.104:18532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253892.142:18533): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253892.142:18534): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253892.190:18535): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253892.190:18536): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253892.234:18537): pid=121714 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253892.234:18538): pid=121714 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A746E7273646D64796C697074756761626977626B676F696A6376626B6E73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253892.234:18539): pid=121714 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253892.236:18540): pid=121714 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253892.458:18541): pid=121714 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253892.459:18542): pid=121714 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253892.462:18543): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253892.462:18544): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253892.631:18545): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253892.631:18546): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253892.670:18547): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253892.671:18548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253892.712:18549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253892.712:18550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253892.767:18551): pid=121751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253892.768:18552): pid=121751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65637265736F7A6D7668687A66746E6866777569696F636C7470696B75737462203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253892.769:18553): pid=121751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253892.772:18554): pid=121751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253892.786:18555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253892.983:18556): pid=121751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253892.983:18557): pid=121751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253892.987:18558): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253892.987:18559): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253893.104:18560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253893.169:18561): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253893.169:18562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253893.200:18563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253893.200:18564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253893.242:18565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253893.242:18566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253893.260:18567): pid=121196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=121268 suid=74 rport=44134 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253893.261:18568): pid=121196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121268 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253893.262:18569): pid=121196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253893.262:18570): pid=121196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253893.287:18571): pid=121451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=121452 suid=74 rport=46884 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253893.288:18572): pid=121451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121452 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253893.289:18573): pid=121451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253893.289:18574): pid=121451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253893.312:18575): pid=121818 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253893.312:18576): pid=121818 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75657366746164616C6B6E76626E627362656D697264656468627873756F7467203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253893.312:18577): pid=121818 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253893.315:18578): pid=121818 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253893.516:18579): pid=121818 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253893.517:18580): pid=121818 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253893.521:18581): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253893.521:18582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253893.552:18583): pid=121888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253893.552:18584): pid=121821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=121888 suid=74 rport=32470 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253893.553:18585): pid=121821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=121888 suid=74 rport=32470 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253893.724:18586): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253893.724:18587): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253893.758:18588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253893.758:18589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253893.799:18590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253893.799:18591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253893.848:18592): pid=121915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253893.848:18593): pid=121915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766270616D70726B626B6E6478626E72656D6E7A766E656B707A7477726C6578203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253893.849:18594): pid=121915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253893.856:18595): pid=121915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253893.873:18596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253893.877:18597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253893.882:18598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253893.887:18599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253893.893:18600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253894.041:18601): pid=121915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253894.041:18602): pid=121915 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253894.044:18603): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253894.044:18604): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253894.068:18605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253894.091:18606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253894.189:18607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253894.228:18608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253894.272:18609): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253894.272:18610): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253894.308:18611): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253894.308:18612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253894.348:18613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253894.349:18614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253894.349:18615): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253894.404:18616): pid=122091 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253894.404:18617): pid=122091 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F6775657A6F62756C656564756272726D7A6379776665726E6B63646E6C71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253894.405:18618): pid=122091 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253894.409:18619): pid=122091 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253894.596:18620): pid=122091 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253894.596:18621): pid=122091 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253894.599:18622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253894.599:18623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253894.769:18624): pid=121821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="connor" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253894.780:18625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253894.780:18626): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253894.809:18627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253894.809:18628): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253894.857:18629): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253894.857:18630): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253894.900:18631): pid=122128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253894.900:18632): pid=122128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657678757861726D7176616E75677465777174756C696A657A687A63656B706B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253894.900:18633): pid=122128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253894.903:18634): pid=122128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253895.060:18635): pid=122128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253895.060:18636): pid=122128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253895.063:18637): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253895.063:18638): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253895.171:18639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253895.277:18640): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253895.277:18641): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253895.309:18642): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253895.309:18643): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253895.314:18644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253895.325:18645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253895.352:18646): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253895.352:18647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253895.412:18648): pid=122203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253895.412:18649): pid=122203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7870666B786167636D6F6A6B63796563727464626A7A6B6478696E6764696A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253895.413:18650): pid=122203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253895.416:18651): pid=122203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253895.516:18652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253895.614:18653): pid=122203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253895.614:18654): pid=122203 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253895.618:18655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253895.618:18656): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253895.794:18657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253895.794:18658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253895.831:18659): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253895.831:18660): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253895.873:18661): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253895.873:18662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253895.925:18663): pid=122297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253895.925:18664): pid=122297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6978666D666C776E7A6A72626776697A77776C6F7872636C7A63756176736176203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253895.926:18665): pid=122297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253895.930:18666): pid=122297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253896.126:18667): pid=122297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253896.126:18668): pid=122297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253896.131:18669): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253896.131:18670): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253896.185:18671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253896.330:18672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253896.346:18673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253896.375:18674): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253896.375:18675): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253896.425:18676): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253896.426:18677): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253896.453:18678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253896.465:18679): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253896.465:18680): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253896.524:18681): pid=122380 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253896.524:18682): pid=122380 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727875676A756A65786669717878676879617A73666A6F766F726E65737A7061203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253896.525:18683): pid=122380 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253896.528:18684): pid=122380 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253896.748:18685): pid=122380 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253896.748:18686): pid=122380 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253896.752:18687): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253896.752:18688): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253896.921:18689): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253896.921:18690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253896.959:18691): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253896.960:18692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253897.001:18693): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253897.001:18694): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253897.066:18695): pid=122417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253897.067:18696): pid=122417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787774736C616778617279776D796F75646F7A6A6B677676786473706C6E627A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253897.067:18697): pid=122417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253897.078:18698): pid=122417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253897.091:18699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253897.095:18700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253897.097:18701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253897.168:18702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253897.257:18703): pid=122417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253897.257:18704): pid=122417 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253897.276:18705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253897.276:18706): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253897.276:18707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253897.306:18708): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253897.306:18709): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253897.307:18710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253897.346:18711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253897.351:18712): pid=122564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253897.351:18713): pid=122564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D756C7873686C7375716C6B677377696A6C67697077656F7066647A646C6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253897.352:18714): pid=122564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253897.355:18715): pid=122564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253897.386:18716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253897.409:18717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253897.516:18718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253898.094:18719): prog-id=947 op=LOAD
type=BPF msg=audit(1781253898.094:18720): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.094:18721): prog-id=948 op=LOAD
type=BPF msg=audit(1781253898.094:18722): prog-id=949 op=LOAD
type=BPF msg=audit(1781253898.094:18723): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.094:18724): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.105:18725): prog-id=950 op=LOAD
type=BPF msg=audit(1781253898.105:18726): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.105:18727): prog-id=951 op=LOAD
type=BPF msg=audit(1781253898.105:18728): prog-id=952 op=LOAD
type=BPF msg=audit(1781253898.105:18729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.105:18730): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.117:18731): prog-id=953 op=LOAD
type=BPF msg=audit(1781253898.117:18732): prog-id=954 op=LOAD
type=BPF msg=audit(1781253898.117:18733): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.117:18734): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.119:18735): prog-id=955 op=LOAD
type=BPF msg=audit(1781253898.119:18736): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253898.122:18737): prog-id=956 op=LOAD
type=BPF msg=audit(1781253898.122:18738): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253898.147:18739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253898.149:18740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253898.155:18741): pid=122564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253898.155:18742): pid=122564 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253898.159:18743): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253898.159:18744): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253898.351:18745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253898.379:18746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253898.661:18747): pid=121821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=121888 suid=74 rport=32470 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253898.662:18748): pid=121821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121888 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253898.663:18749): pid=121821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=121821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253898.663:18750): pid=121821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253898.851:18751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253898.851:18752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253898.916:18753): pid=122806 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253898.916:18754): pid=122806 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F61667376756F72776A62726B797A79616A7865636E6F73786D697665656F67203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253898.917:18755): pid=122806 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253898.921:18756): pid=122806 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253898.932:18757): pid=122809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=122809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253898.934:18758): pid=122789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=122809 suid=74 rport=32488 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253898.934:18759): pid=122789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=122809 suid=74 rport=32488 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253899.904:18760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253899.908:18761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253900.173:18762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253900.230:18763): pid=122789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ch" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253900.722:18764): prog-id=957 op=LOAD
type=BPF msg=audit(1781253900.722:18765): prog-id=958 op=LOAD
type=BPF msg=audit(1781253900.722:18766): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.722:18767): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.729:18768): prog-id=959 op=LOAD
type=BPF msg=audit(1781253900.729:18769): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.735:18770): prog-id=960 op=LOAD
type=BPF msg=audit(1781253900.735:18771): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.735:18772): prog-id=961 op=LOAD
type=BPF msg=audit(1781253900.735:18773): prog-id=962 op=LOAD
type=BPF msg=audit(1781253900.735:18774): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.735:18775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.743:18776): prog-id=963 op=LOAD
type=BPF msg=audit(1781253900.743:18777): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.743:18778): prog-id=964 op=LOAD
type=BPF msg=audit(1781253900.743:18779): prog-id=965 op=LOAD
type=BPF msg=audit(1781253900.743:18780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.743:18781): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253900.746:18782): prog-id=966 op=LOAD
type=BPF msg=audit(1781253900.746:18783): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253900.759:18784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253900.764:18785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253900.776:18786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253900.841:18787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_central comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253900.865:18788): pid=122806 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253900.866:18789): pid=122806 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253900.870:18790): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253900.870:18791): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253901.079:18792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253901.126:18793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253901.142:18794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253901.629:18795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253901.645:18796): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253901.645:18797): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253901.691:18798): pid=123264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253901.691:18799): pid=123264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F727875796A657363706366616F696765626F6C717264696E79676F636E6C6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253901.692:18800): pid=123264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253901.695:18801): pid=123264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253902.414:18802): prog-id=967 op=LOAD
type=BPF msg=audit(1781253902.415:18803): prog-id=968 op=LOAD
type=BPF msg=audit(1781253902.415:18804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.415:18805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.423:18806): prog-id=969 op=LOAD
type=BPF msg=audit(1781253902.423:18807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.429:18808): prog-id=970 op=LOAD
type=BPF msg=audit(1781253902.429:18809): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.429:18810): prog-id=971 op=LOAD
type=BPF msg=audit(1781253902.429:18811): prog-id=972 op=LOAD
type=BPF msg=audit(1781253902.429:18812): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.429:18813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.441:18814): prog-id=973 op=LOAD
type=BPF msg=audit(1781253902.442:18815): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.442:18816): prog-id=974 op=LOAD
type=BPF msg=audit(1781253902.442:18817): prog-id=975 op=LOAD
type=BPF msg=audit(1781253902.442:18818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253902.442:18819): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781253902.445:18820): pid=122789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122809 suid=74 rport=32488 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253902.445:18821): pid=122789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=122809 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253902.446:18822): pid=122789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=122789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253902.446:18823): pid=122789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253902.448:18824): prog-id=976 op=LOAD
type=BPF msg=audit(1781253902.448:18825): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253902.468:18826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253902.471:18827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253902.650:18828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253902.712:18829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_notification comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253902.732:18830): pid=123264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253902.733:18831): pid=123264 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253902.738:18832): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253902.739:18833): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253902.848:18834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253902.889:18835): pid=123401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253902.890:18836): pid=123365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=123401 suid=74 rport=56840 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253902.890:18837): pid=123365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=123401 suid=74 rport=56840 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253903.170:18838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253903.255:18839): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253903.255:18840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253903.305:18841): pid=123454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253903.305:18842): pid=123454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C697A636362716E67756A787A67766B706E66687175787464707A686F6869203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253903.306:18843): pid=123454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253903.311:18844): pid=123454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253903.545:18845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253903.592:18846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253903.726:18847): pid=123500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253903.857:18848): pid=123497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=123500 suid=74 rport=54024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253903.858:18849): pid=123497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=123500 suid=74 rport=54024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253904.106:18850): prog-id=977 op=LOAD
type=BPF msg=audit(1781253904.106:18851): prog-id=978 op=LOAD
type=BPF msg=audit(1781253904.106:18852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.106:18853): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.121:18854): prog-id=979 op=LOAD
type=BPF msg=audit(1781253904.121:18855): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.131:18856): prog-id=980 op=LOAD
type=BPF msg=audit(1781253904.131:18857): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.131:18858): prog-id=981 op=LOAD
type=BPF msg=audit(1781253904.131:18859): prog-id=982 op=LOAD
type=BPF msg=audit(1781253904.131:18860): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.131:18861): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.140:18862): prog-id=983 op=LOAD
type=BPF msg=audit(1781253904.141:18863): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.141:18864): prog-id=984 op=LOAD
type=BPF msg=audit(1781253904.141:18865): prog-id=985 op=LOAD
type=BPF msg=audit(1781253904.141:18866): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.141:18867): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253904.143:18868): prog-id=986 op=LOAD
type=BPF msg=audit(1781253904.143:18869): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253904.161:18870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253904.229:18871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253904.249:18872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253904.265:18873): pid=123454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253904.265:18874): pid=123454 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253904.271:18875): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253904.271:18876): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253904.414:18877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253904.486:18878): pid=123365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="forest" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253904.487:18879): pid=123497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pc" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253905.021:18880): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253905.021:18881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253905.082:18882): pid=123616 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253905.082:18883): pid=123616 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68676D676878787664637A6C6464737A736C65666D656B696E677377637A7971203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253905.083:18884): pid=123616 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253905.086:18885): pid=123616 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253905.390:18886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253905.409:18887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253905.845:18888): prog-id=987 op=LOAD
type=BPF msg=audit(1781253905.845:18889): prog-id=988 op=LOAD
type=BPF msg=audit(1781253905.845:18890): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.845:18891): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.853:18892): prog-id=989 op=LOAD
type=BPF msg=audit(1781253905.853:18893): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.859:18894): prog-id=990 op=LOAD
type=BPF msg=audit(1781253905.859:18895): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.859:18896): prog-id=991 op=LOAD
type=BPF msg=audit(1781253905.859:18897): prog-id=992 op=LOAD
type=BPF msg=audit(1781253905.859:18898): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.859:18899): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.869:18900): prog-id=993 op=LOAD
type=BPF msg=audit(1781253905.869:18901): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.869:18902): prog-id=994 op=LOAD
type=BPF msg=audit(1781253905.869:18903): prog-id=995 op=LOAD
type=BPF msg=audit(1781253905.869:18904): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.869:18905): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253905.872:18906): prog-id=996 op=LOAD
type=BPF msg=audit(1781253905.872:18907): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253905.894:18908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253905.894:18909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253905.920:18910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253905.922:18911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253905.925:18912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253906.103:18913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253906.123:18914): pid=123616 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253906.124:18915): pid=123616 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253906.127:18916): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253906.127:18917): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253906.245:18918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253906.285:18919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253906.294:18920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253906.681:18921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253906.717:18922): pid=123881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253906.752:18923): pid=123880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=123881 suid=74 rport=47496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253906.753:18924): pid=123880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=123881 suid=74 rport=47496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253906.866:18925): pid=123497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=123500 suid=74 rport=54024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253906.867:18926): pid=123497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123500 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253906.868:18927): pid=123497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253906.868:18928): pid=123497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253906.869:18929): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253906.869:18930): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253906.922:18931): pid=123918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253906.922:18932): pid=123918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717A7467657167656568746E716C677A61666B7A65676466756366646E666F6A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253906.924:18933): pid=123918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253906.927:18934): pid=123918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253907.016:18935): pid=123880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253907.161:18936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253907.827:18937): prog-id=997 op=LOAD
type=BPF msg=audit(1781253907.828:18938): prog-id=998 op=LOAD
type=BPF msg=audit(1781253907.828:18939): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.828:18940): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.835:18941): prog-id=999 op=LOAD
type=BPF msg=audit(1781253907.835:18942): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.841:18943): prog-id=1000 op=LOAD
type=BPF msg=audit(1781253907.841:18944): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.841:18945): prog-id=1001 op=LOAD
type=BPF msg=audit(1781253907.841:18946): prog-id=1002 op=LOAD
type=BPF msg=audit(1781253907.841:18947): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.842:18948): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.852:18949): prog-id=1003 op=LOAD
type=BPF msg=audit(1781253907.852:18950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.853:18951): prog-id=1004 op=LOAD
type=BPF msg=audit(1781253907.853:18952): prog-id=1005 op=LOAD
type=BPF msg=audit(1781253907.853:18953): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.853:18954): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253907.855:18955): prog-id=1006 op=LOAD
type=BPF msg=audit(1781253907.855:18956): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253907.991:18957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253908.025:18958): pid=123918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253908.025:18959): pid=123918 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253908.031:18960): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253908.031:18961): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253908.566:18962): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253908.566:18963): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253908.645:18964): pid=124070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253908.645:18965): pid=124070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C6B74646D6476696764776B756D717172766E757A79747478766864756870203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253908.646:18966): pid=124070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253908.666:18967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781253908.667:18968): pid=124070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253908.691:18969): pid=123365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=123401 suid=74 rport=56840 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253908.692:18970): pid=123365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123401 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253908.693:18971): pid=123365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253908.693:18972): pid=123365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253908.787:18973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253908.834:18974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253908.986:18975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253909.203:18976): pid=124170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=124170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253909.204:18977): pid=124094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=124170 suid=74 rport=56856 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253909.204:18978): pid=124094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=124170 suid=74 rport=56856 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253909.452:18979): prog-id=1007 op=LOAD
type=BPF msg=audit(1781253909.452:18980): prog-id=1008 op=LOAD
type=BPF msg=audit(1781253909.452:18981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.453:18982): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.462:18983): prog-id=1009 op=LOAD
type=BPF msg=audit(1781253909.462:18984): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.469:18985): prog-id=1010 op=LOAD
type=BPF msg=audit(1781253909.469:18986): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.469:18987): prog-id=1011 op=LOAD
type=BPF msg=audit(1781253909.469:18988): prog-id=1012 op=LOAD
type=BPF msg=audit(1781253909.469:18989): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.469:18990): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.478:18991): prog-id=1013 op=LOAD
type=BPF msg=audit(1781253909.479:18992): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.479:18993): prog-id=1014 op=LOAD
type=BPF msg=audit(1781253909.479:18994): prog-id=1015 op=LOAD
type=BPF msg=audit(1781253909.479:18995): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.479:18996): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253909.481:18997): prog-id=1016 op=LOAD
type=BPF msg=audit(1781253909.481:18998): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253909.596:18999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253909.630:19000): pid=124070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253909.631:19001): pid=124070 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253909.635:19002): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253909.635:19003): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253910.370:19004): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253910.370:19005): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253910.453:19006): pid=124277 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253910.453:19007): pid=124277 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C676A68666879677664687A787A7466657579796A6D767079726C6E657966203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253910.456:19008): pid=124277 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253910.462:19009): pid=124277 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253910.673:19010): pid=123880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=123881 suid=74 rport=47496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253910.674:19011): pid=123880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123881 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253910.675:19012): pid=123880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=123880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253910.675:19013): pid=123880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253910.688:19014): pid=124094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="miao" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253910.852:19015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253911.362:19016): prog-id=1017 op=LOAD
type=BPF msg=audit(1781253911.362:19017): prog-id=1018 op=LOAD
type=BPF msg=audit(1781253911.362:19018): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.362:19019): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.371:19020): prog-id=1019 op=LOAD
type=BPF msg=audit(1781253911.371:19021): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.377:19022): prog-id=1020 op=LOAD
type=BPF msg=audit(1781253911.377:19023): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.377:19024): prog-id=1021 op=LOAD
type=BPF msg=audit(1781253911.377:19025): prog-id=1022 op=LOAD
type=BPF msg=audit(1781253911.377:19026): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.377:19027): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.387:19028): prog-id=1023 op=LOAD
type=BPF msg=audit(1781253911.387:19029): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.387:19030): prog-id=1024 op=LOAD
type=BPF msg=audit(1781253911.387:19031): prog-id=1025 op=LOAD
type=BPF msg=audit(1781253911.387:19032): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.387:19033): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253911.389:19034): prog-id=1026 op=LOAD
type=BPF msg=audit(1781253911.389:19035): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253911.408:19036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253911.515:19037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253911.542:19038): pid=124277 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253911.543:19039): pid=124277 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253911.547:19040): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253911.547:19041): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253912.248:19042): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253912.248:19043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253912.297:19044): pid=124416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253912.297:19045): pid=124416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E6F6C75776B7065727A7A7864707765677664766672736177626C63686C77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253912.298:19046): pid=124416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253912.303:19047): pid=124416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253913.061:19048): prog-id=1027 op=LOAD
type=BPF msg=audit(1781253913.061:19049): prog-id=1028 op=LOAD
type=BPF msg=audit(1781253913.061:19050): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.061:19051): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.069:19052): prog-id=1029 op=LOAD
type=BPF msg=audit(1781253913.069:19053): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.076:19054): prog-id=1030 op=LOAD
type=BPF msg=audit(1781253913.076:19055): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.076:19056): prog-id=1031 op=LOAD
type=BPF msg=audit(1781253913.076:19057): prog-id=1032 op=LOAD
type=BPF msg=audit(1781253913.076:19058): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.076:19059): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.090:19060): prog-id=1033 op=LOAD
type=BPF msg=audit(1781253913.090:19061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.090:19062): prog-id=1034 op=LOAD
type=BPF msg=audit(1781253913.090:19063): prog-id=1035 op=LOAD
type=BPF msg=audit(1781253913.090:19064): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.090:19065): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253913.093:19066): prog-id=1036 op=LOAD
type=BPF msg=audit(1781253913.093:19067): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253913.238:19068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api_internal comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253913.257:19069): pid=124416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253913.258:19070): pid=124416 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253913.262:19071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253913.262:19072): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253914.042:19073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253914.042:19074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253914.121:19075): pid=124596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253914.122:19076): pid=124596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7069637578646962776C67666A69697861736D796A62796D6467776F7A6E676A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253914.123:19077): pid=124596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253914.130:19078): pid=124596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253914.883:19079): prog-id=1037 op=LOAD
type=BPF msg=audit(1781253914.883:19080): prog-id=1038 op=LOAD
type=BPF msg=audit(1781253914.883:19081): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.883:19082): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.891:19083): prog-id=1039 op=LOAD
type=BPF msg=audit(1781253914.891:19084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.899:19085): prog-id=1040 op=LOAD
type=BPF msg=audit(1781253914.899:19086): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.899:19087): prog-id=1041 op=LOAD
type=BPF msg=audit(1781253914.899:19088): prog-id=1042 op=LOAD
type=BPF msg=audit(1781253914.899:19089): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.899:19090): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.910:19091): prog-id=1043 op=LOAD
type=BPF msg=audit(1781253914.910:19092): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.910:19093): prog-id=1044 op=LOAD
type=BPF msg=audit(1781253914.910:19094): prog-id=1045 op=LOAD
type=BPF msg=audit(1781253914.910:19095): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.910:19096): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253914.913:19097): prog-id=1046 op=LOAD
type=BPF msg=audit(1781253914.913:19098): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253914.951:19099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253915.126:19100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api_internal_tls_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253915.149:19101): pid=124596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253915.149:19102): pid=124596 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253915.154:19103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253915.154:19104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253915.271:19105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253915.337:19106): pid=124094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124170 suid=74 rport=56856 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253915.339:19107): pid=124094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=124170 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253915.339:19108): pid=124094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=124094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253915.339:19109): pid=124094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253915.741:19110): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253915.741:19111): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253915.798:19112): pid=124874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=124874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253915.799:19113): pid=124760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=124874 suid=74 rport=18248 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253915.799:19114): pid=124760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=124874 suid=74 rport=18248 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1781253915.811:19115): pid=124872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253915.812:19116): pid=124872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717A616B6C666E68636C7370676E71756B7466627A78626A727A757A766E7672203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253915.814:19117): pid=124872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253915.818:19118): pid=124872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253916.921:19119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253916.926:19120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253917.099:19121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253917.583:19122): prog-id=1047 op=LOAD
type=BPF msg=audit(1781253917.584:19123): prog-id=1048 op=LOAD
type=BPF msg=audit(1781253917.584:19124): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.584:19125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.592:19126): prog-id=1049 op=LOAD
type=BPF msg=audit(1781253917.592:19127): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.599:19128): prog-id=1050 op=LOAD
type=BPF msg=audit(1781253917.599:19129): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.599:19130): prog-id=1051 op=LOAD
type=BPF msg=audit(1781253917.599:19131): prog-id=1052 op=LOAD
type=BPF msg=audit(1781253917.599:19132): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.599:19133): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.609:19134): prog-id=1053 op=LOAD
type=BPF msg=audit(1781253917.610:19135): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.610:19136): prog-id=1054 op=LOAD
type=BPF msg=audit(1781253917.610:19137): prog-id=1055 op=LOAD
type=BPF msg=audit(1781253917.610:19138): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.610:19139): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253917.612:19140): prog-id=1056 op=LOAD
type=BPF msg=audit(1781253917.612:19141): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253917.629:19142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253917.638:19143): pid=124760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="plesk" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253917.740:19144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api_tls_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253917.772:19145): pid=124872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253917.773:19146): pid=124872 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253917.778:19147): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253917.778:19148): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253918.630:19149): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253918.630:19150): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253918.692:19151): pid=125107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253918.692:19152): pid=125107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B707172756F7165786A68636F6B64686C617A726F79737A786E677A62627872203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253918.694:19153): pid=125107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253918.699:19154): pid=125107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253919.446:19155): prog-id=1057 op=LOAD
type=BPF msg=audit(1781253919.446:19156): prog-id=1058 op=LOAD
type=BPF msg=audit(1781253919.446:19157): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.446:19158): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.454:19159): prog-id=1059 op=LOAD
type=BPF msg=audit(1781253919.454:19160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.460:19161): prog-id=1060 op=LOAD
type=BPF msg=audit(1781253919.460:19162): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.460:19163): prog-id=1061 op=LOAD
type=BPF msg=audit(1781253919.460:19164): prog-id=1062 op=LOAD
type=BPF msg=audit(1781253919.460:19165): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.460:19166): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.471:19167): prog-id=1063 op=LOAD
type=BPF msg=audit(1781253919.471:19168): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.471:19169): prog-id=1064 op=LOAD
type=BPF msg=audit(1781253919.471:19170): prog-id=1065 op=LOAD
type=BPF msg=audit(1781253919.471:19171): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.471:19172): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253919.473:19173): prog-id=1066 op=LOAD
type=BPF msg=audit(1781253919.473:19174): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253919.495:19175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253919.497:19176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253919.574:19177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_heat_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253919.609:19178): pid=125107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253919.609:19179): pid=125107 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253919.615:19180): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253919.615:19181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253919.765:19182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253919.813:19183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253919.914:19184): pid=124760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124874 suid=74 rport=18248 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253919.915:19185): pid=124760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=124874 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253919.916:19186): pid=124760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=124760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253919.916:19187): pid=124760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253920.123:19188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253920.123:19189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253920.181:19190): pid=125306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253920.181:19191): pid=125306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70786C716D6A67766769646F6F79787664616A6C766F626E7665726C696F6A62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253920.183:19192): pid=125306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253920.187:19193): pid=125306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253920.284:19194): pid=125317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=125317 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253920.286:19195): pid=125239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=125317 suid=74 rport=18264 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253920.286:19196): pid=125239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=125317 suid=74 rport=18264 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253920.993:19197): prog-id=1067 op=LOAD
type=BPF msg=audit(1781253920.993:19198): prog-id=1068 op=LOAD
type=BPF msg=audit(1781253920.993:19199): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253920.993:19200): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.001:19201): prog-id=1069 op=LOAD
type=BPF msg=audit(1781253921.001:19202): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.008:19203): prog-id=1070 op=LOAD
type=BPF msg=audit(1781253921.008:19204): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.008:19205): prog-id=1071 op=LOAD
type=BPF msg=audit(1781253921.008:19206): prog-id=1072 op=LOAD
type=BPF msg=audit(1781253921.008:19207): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.008:19208): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.018:19209): prog-id=1073 op=LOAD
type=BPF msg=audit(1781253921.018:19210): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.018:19211): prog-id=1074 op=LOAD
type=BPF msg=audit(1781253921.018:19212): prog-id=1075 op=LOAD
type=BPF msg=audit(1781253921.018:19213): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.018:19214): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253921.021:19215): prog-id=1076 op=LOAD
type=BPF msg=audit(1781253921.021:19216): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253921.165:19217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_heat_api_cfn comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253921.199:19218): pid=125306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253921.199:19219): pid=125306 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253921.205:19220): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253921.205:19221): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253921.895:19222): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253921.895:19223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253921.962:19224): pid=125423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253921.962:19225): pid=125423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70746369796B627970646E6664796863746D676E726E7A7174656E6670636C74203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253921.963:19226): pid=125423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253921.968:19227): pid=125423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253922.100:19228): pid=125239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="cm" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253922.762:19229): prog-id=1077 op=LOAD
type=BPF msg=audit(1781253922.762:19230): prog-id=1078 op=LOAD
type=BPF msg=audit(1781253922.762:19231): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.762:19232): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.771:19233): prog-id=1079 op=LOAD
type=BPF msg=audit(1781253922.771:19234): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.777:19235): prog-id=1080 op=LOAD
type=BPF msg=audit(1781253922.777:19236): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.777:19237): prog-id=1081 op=LOAD
type=BPF msg=audit(1781253922.777:19238): prog-id=1082 op=LOAD
type=BPF msg=audit(1781253922.777:19239): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.777:19240): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.787:19241): prog-id=1083 op=LOAD
type=BPF msg=audit(1781253922.787:19242): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.787:19243): prog-id=1084 op=LOAD
type=BPF msg=audit(1781253922.787:19244): prog-id=1085 op=LOAD
type=BPF msg=audit(1781253922.787:19245): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.787:19246): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253922.789:19247): prog-id=1086 op=LOAD
type=BPF msg=audit(1781253922.789:19248): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253922.930:19249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_heat_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253922.965:19250): pid=125423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253922.965:19251): pid=125423 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253922.970:19252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253922.970:19253): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253923.179:19254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253923.332:19255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253923.739:19256): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253923.739:19257): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253923.804:19258): pid=125540 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253923.805:19259): pid=125540 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E65786F616368756C7762716879646C70757A7163657678696F6D6478716376203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253923.806:19260): pid=125540 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253923.811:19261): pid=125540 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253924.112:19262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253924.116:19263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253924.602:19264): prog-id=1087 op=LOAD
type=BPF msg=audit(1781253924.603:19265): prog-id=1088 op=LOAD
type=BPF msg=audit(1781253924.603:19266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.603:19267): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.610:19268): prog-id=1089 op=LOAD
type=BPF msg=audit(1781253924.611:19269): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.618:19270): prog-id=1090 op=LOAD
type=BPF msg=audit(1781253924.618:19271): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.618:19272): prog-id=1091 op=LOAD
type=BPF msg=audit(1781253924.618:19273): prog-id=1092 op=LOAD
type=BPF msg=audit(1781253924.618:19274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.618:19275): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.628:19276): prog-id=1093 op=LOAD
type=BPF msg=audit(1781253924.628:19277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.628:19278): prog-id=1094 op=LOAD
type=BPF msg=audit(1781253924.629:19279): prog-id=1095 op=LOAD
type=BPF msg=audit(1781253924.629:19280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.629:19281): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253924.631:19282): prog-id=1096 op=LOAD
type=BPF msg=audit(1781253924.631:19283): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253924.653:19284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253924.654:19285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253924.676:19286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253924.679:19287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253924.682:19288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253924.760:19289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_heat_engine comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253924.781:19290): pid=125540 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253924.781:19291): pid=125540 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253924.788:19292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253924.788:19293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253924.864:19294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253924.953:19295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253925.033:19296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253925.295:19297): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253925.296:19298): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253925.358:19299): pid=125840 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253925.359:19300): pid=125840 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75797862747479756667756761736D696C7067676F6765737670776E6F6C6C6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253925.359:19301): pid=125840 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253925.366:19302): pid=125840 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253925.381:19303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253925.517:19304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253925.531:19305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253925.696:19306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253926.195:19307): prog-id=1097 op=LOAD
type=BPF msg=audit(1781253926.195:19308): prog-id=1098 op=LOAD
type=BPF msg=audit(1781253926.195:19309): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.195:19310): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.206:19311): prog-id=1099 op=LOAD
type=BPF msg=audit(1781253926.206:19312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.215:19313): prog-id=1100 op=LOAD
type=BPF msg=audit(1781253926.215:19314): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.215:19315): prog-id=1101 op=LOAD
type=BPF msg=audit(1781253926.215:19316): prog-id=1102 op=LOAD
type=BPF msg=audit(1781253926.215:19317): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.215:19318): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.229:19319): prog-id=1103 op=LOAD
type=BPF msg=audit(1781253926.229:19320): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.229:19321): prog-id=1104 op=LOAD
type=BPF msg=audit(1781253926.229:19322): prog-id=1105 op=LOAD
type=BPF msg=audit(1781253926.229:19323): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.229:19324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253926.232:19325): prog-id=1106 op=LOAD
type=BPF msg=audit(1781253926.232:19326): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253926.362:19327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_logrotate_crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253926.382:19328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253926.401:19329): pid=125840 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253926.401:19330): pid=125840 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253926.409:19331): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253926.409:19332): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253926.427:19333): pid=125239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125317 suid=74 rport=18264 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253926.429:19334): pid=125239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=125317 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253926.430:19335): pid=125239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=125239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253926.430:19336): pid=125239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253926.512:19337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253926.542:19338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253926.678:19339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253926.926:19340): pid=126054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=126054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253926.928:19341): pid=126042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=126054 suid=74 rport=18648 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253926.928:19342): pid=126042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=126054 suid=74 rport=18648 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253927.130:19343): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253927.130:19344): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253927.181:19345): pid=126076 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253927.181:19346): pid=126076 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F77666D74696C716D6F66626869637877637976657A7366727761627A69786A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253927.182:19347): pid=126076 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253927.187:19348): pid=126076 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253927.474:19349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253927.477:19350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253927.479:19351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253927.481:19352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253927.536:19353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253927.979:19354): prog-id=1107 op=LOAD
type=BPF msg=audit(1781253927.979:19355): prog-id=1108 op=LOAD
type=BPF msg=audit(1781253927.979:19356): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253927.979:19357): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253927.988:19358): prog-id=1109 op=LOAD
type=BPF msg=audit(1781253927.988:19359): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253927.994:19360): prog-id=1110 op=LOAD
type=BPF msg=audit(1781253927.995:19361): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253927.995:19362): prog-id=1111 op=LOAD
type=BPF msg=audit(1781253927.995:19363): prog-id=1112 op=LOAD
type=BPF msg=audit(1781253927.995:19364): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253927.995:19365): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253928.005:19366): prog-id=1113 op=LOAD
type=BPF msg=audit(1781253928.005:19367): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253928.005:19368): prog-id=1114 op=LOAD
type=BPF msg=audit(1781253928.005:19369): prog-id=1115 op=LOAD
type=BPF msg=audit(1781253928.005:19370): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253928.005:19371): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253928.008:19372): prog-id=1116 op=LOAD
type=BPF msg=audit(1781253928.008:19373): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253928.028:19374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253928.030:19375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253928.031:19376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253928.031:19377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253928.056:19378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253928.111:19379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253928.129:19380): pid=126076 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253928.130:19381): pid=126076 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253928.135:19382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253928.135:19383): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253928.653:19384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253928.656:19385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253928.662:19386): pid=126042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="linux" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253928.799:19387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253928.824:19388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253928.855:19389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253928.855:19390): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253928.908:19391): pid=126498 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253928.909:19392): pid=126498 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F76787564786E766C6A7264666F656A67787563757362756E736476617A6A64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253928.910:19393): pid=126498 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253928.914:19394): pid=126498 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253930.245:19395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253930.688:19396): prog-id=1117 op=LOAD
type=BPF msg=audit(1781253930.688:19397): prog-id=1118 op=LOAD
type=BPF msg=audit(1781253930.688:19398): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.688:19399): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.696:19400): prog-id=1119 op=LOAD
type=BPF msg=audit(1781253930.696:19401): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.702:19402): prog-id=1120 op=LOAD
type=BPF msg=audit(1781253930.702:19403): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.702:19404): prog-id=1121 op=LOAD
type=BPF msg=audit(1781253930.703:19405): prog-id=1122 op=LOAD
type=BPF msg=audit(1781253930.703:19406): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.703:19407): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.712:19408): prog-id=1123 op=LOAD
type=BPF msg=audit(1781253930.712:19409): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.712:19410): prog-id=1124 op=LOAD
type=BPF msg=audit(1781253930.712:19411): prog-id=1125 op=LOAD
type=BPF msg=audit(1781253930.712:19412): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.712:19413): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253930.714:19414): prog-id=1126 op=LOAD
type=BPF msg=audit(1781253930.714:19415): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253930.733:19416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253930.806:19417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253930.819:19418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253930.827:19419): pid=126498 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253930.827:19420): pid=126498 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253930.831:19421): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253930.831:19422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253931.171:19423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253931.174:19424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253931.354:19425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253931.417:19426): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253931.417:19427): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253931.423:19428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253931.457:19429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253931.475:19430): pid=126907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253931.476:19431): pid=126907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B646E78776469776C6F67616F7567646D766A6279746D777862766E656F75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253931.477:19432): pid=126907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253931.480:19433): pid=126907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253931.770:19434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253932.280:19435): prog-id=1127 op=LOAD
type=BPF msg=audit(1781253932.280:19436): prog-id=1128 op=LOAD
type=BPF msg=audit(1781253932.280:19437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.280:19438): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.288:19439): prog-id=1129 op=LOAD
type=BPF msg=audit(1781253932.288:19440): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.294:19441): prog-id=1130 op=LOAD
type=BPF msg=audit(1781253932.294:19442): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.294:19443): prog-id=1131 op=LOAD
type=BPF msg=audit(1781253932.294:19444): prog-id=1132 op=LOAD
type=BPF msg=audit(1781253932.295:19445): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.295:19446): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.304:19447): prog-id=1133 op=LOAD
type=BPF msg=audit(1781253932.305:19448): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.305:19449): prog-id=1134 op=LOAD
type=BPF msg=audit(1781253932.305:19450): prog-id=1135 op=LOAD
type=BPF msg=audit(1781253932.305:19451): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.305:19452): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253932.307:19453): prog-id=1136 op=LOAD
type=BPF msg=audit(1781253932.307:19454): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253932.333:19455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253932.440:19456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253932.465:19457): pid=126907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253932.465:19458): pid=126907 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253932.469:19459): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253932.470:19460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253932.696:19461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253932.851:19462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253932.868:19463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253933.099:19464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253933.278:19465): pid=126042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126054 suid=74 rport=18648 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253933.279:19466): pid=126042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=126054 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253933.280:19467): pid=126042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=126042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253933.280:19468): pid=126042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253933.426:19469): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253933.426:19470): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253933.471:19471): pid=127230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253933.472:19472): pid=127230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65646F62646F7A656A756A6E7565676E7A7A737A6379656F6B70716E6E616E71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253933.473:19473): pid=127230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253933.476:19474): pid=127230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253933.746:19475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253933.817:19476): pid=127257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=127257 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253933.819:19477): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=127257 suid=74 rport=19316 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253933.819:19478): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=127257 suid=74 rport=19316 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253934.192:19479): prog-id=1137 op=LOAD
type=BPF msg=audit(1781253934.192:19480): prog-id=1138 op=LOAD
type=BPF msg=audit(1781253934.192:19481): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.192:19482): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.200:19483): prog-id=1139 op=LOAD
type=BPF msg=audit(1781253934.200:19484): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.207:19485): prog-id=1140 op=LOAD
type=BPF msg=audit(1781253934.207:19486): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.207:19487): prog-id=1141 op=LOAD
type=BPF msg=audit(1781253934.207:19488): prog-id=1142 op=LOAD
type=BPF msg=audit(1781253934.207:19489): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.207:19490): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.217:19491): prog-id=1143 op=LOAD
type=BPF msg=audit(1781253934.217:19492): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.217:19493): prog-id=1144 op=LOAD
type=BPF msg=audit(1781253934.217:19494): prog-id=1145 op=LOAD
type=BPF msg=audit(1781253934.217:19495): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.217:19496): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253934.220:19497): prog-id=1146 op=LOAD
type=BPF msg=audit(1781253934.220:19498): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253934.239:19499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253934.261:19500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253934.375:19501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_neutron_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253934.407:19502): pid=127230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253934.408:19503): pid=127230 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253934.411:19504): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253934.411:19505): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253934.729:19506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253934.732:19507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253934.906:19508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253935.175:19509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253935.175:19510): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253935.236:19511): pid=127424 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253935.236:19512): pid=127424 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6568686B79656A6674626873647A7263787979686D6C7577716B657463677365203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253935.237:19513): pid=127424 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253935.241:19514): pid=127424 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253935.246:19515): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="imapserver" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253935.994:19516): prog-id=1147 op=LOAD
type=BPF msg=audit(1781253935.994:19517): prog-id=1148 op=LOAD
type=BPF msg=audit(1781253935.994:19518): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253935.994:19519): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.002:19520): prog-id=1149 op=LOAD
type=BPF msg=audit(1781253936.002:19521): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.008:19522): prog-id=1150 op=LOAD
type=BPF msg=audit(1781253936.008:19523): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.008:19524): prog-id=1151 op=LOAD
type=BPF msg=audit(1781253936.008:19525): prog-id=1152 op=LOAD
type=BPF msg=audit(1781253936.008:19526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.008:19527): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.018:19528): prog-id=1153 op=LOAD
type=BPF msg=audit(1781253936.018:19529): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.018:19530): prog-id=1154 op=LOAD
type=BPF msg=audit(1781253936.018:19531): prog-id=1155 op=LOAD
type=BPF msg=audit(1781253936.018:19532): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.018:19533): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253936.020:19534): prog-id=1156 op=LOAD
type=BPF msg=audit(1781253936.020:19535): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253936.043:19536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253936.045:19537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253936.103:19538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_neutron_server_tls_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253936.145:19539): pid=127424 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253936.145:19540): pid=127424 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253936.150:19541): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253936.150:19542): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253936.206:19543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253936.320:19544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253936.325:19545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253936.331:19546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253936.334:19547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253936.656:19548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253936.656:19549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253936.675:19550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253936.726:19551): pid=127671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253936.726:19552): pid=127671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7973677773666E6D7A726B706166637A6A6B657567717272636B677265626D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253936.727:19553): pid=127671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253936.731:19554): pid=127671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253936.877:19555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253936.896:19556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253937.118:19557): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127257 suid=74 rport=19316 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253937.119:19558): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=127257 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253937.120:19559): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=127216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253937.120:19560): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253937.404:19561): pid=127747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=127747 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253937.406:19562): pid=127704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=127747 suid=74 rport=19330 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253937.406:19563): pid=127704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=127747 suid=74 rport=19330 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253937.551:19564): prog-id=1157 op=LOAD
type=BPF msg=audit(1781253937.551:19565): prog-id=1158 op=LOAD
type=BPF msg=audit(1781253937.551:19566): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.551:19567): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.559:19568): prog-id=1159 op=LOAD
type=BPF msg=audit(1781253937.559:19569): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.566:19570): prog-id=1160 op=LOAD
type=BPF msg=audit(1781253937.566:19571): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.566:19572): prog-id=1161 op=LOAD
type=BPF msg=audit(1781253937.566:19573): prog-id=1162 op=LOAD
type=BPF msg=audit(1781253937.566:19574): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.566:19575): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.576:19576): prog-id=1163 op=LOAD
type=BPF msg=audit(1781253937.576:19577): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.576:19578): prog-id=1164 op=LOAD
type=BPF msg=audit(1781253937.576:19579): prog-id=1165 op=LOAD
type=BPF msg=audit(1781253937.576:19580): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.576:19581): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253937.579:19582): prog-id=1166 op=LOAD
type=BPF msg=audit(1781253937.579:19583): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253937.610:19584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253937.698:19585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253937.736:19586): pid=127671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253937.736:19587): pid=127671 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253937.742:19588): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253937.742:19589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253938.028:19590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253938.465:19591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253938.465:19592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253938.514:19593): pid=127866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253938.514:19594): pid=127866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C787378696A7969656C7975696964786D7973637963716C68616C747479776E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253938.515:19595): pid=127866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253938.521:19596): pid=127866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253938.858:19597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253939.329:19598): prog-id=1167 op=LOAD
type=BPF msg=audit(1781253939.329:19599): prog-id=1168 op=LOAD
type=BPF msg=audit(1781253939.329:19600): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.329:19601): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.337:19602): prog-id=1169 op=LOAD
type=BPF msg=audit(1781253939.337:19603): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.343:19604): prog-id=1170 op=LOAD
type=BPF msg=audit(1781253939.343:19605): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.343:19606): prog-id=1171 op=LOAD
type=BPF msg=audit(1781253939.344:19607): prog-id=1172 op=LOAD
type=BPF msg=audit(1781253939.344:19608): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.344:19609): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.354:19610): prog-id=1173 op=LOAD
type=BPF msg=audit(1781253939.354:19611): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.355:19612): prog-id=1174 op=LOAD
type=BPF msg=audit(1781253939.355:19613): prog-id=1175 op=LOAD
type=BPF msg=audit(1781253939.355:19614): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.355:19615): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253939.357:19616): prog-id=1176 op=LOAD
type=BPF msg=audit(1781253939.357:19617): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253939.385:19618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253939.404:19619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253939.411:19620): pid=127704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="b" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253939.542:19621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253939.565:19622): pid=127866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253939.565:19623): pid=127866 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253939.570:19624): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253939.570:19625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253939.633:19626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253940.325:19627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253940.325:19628): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253940.383:19629): pid=128085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253940.384:19630): pid=128085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D63786868746A736663756D686E72716A6E72646C6574637A636277656F68203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253940.384:19631): pid=128085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253940.388:19632): pid=128085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253941.172:19633): prog-id=1177 op=LOAD
type=BPF msg=audit(1781253941.172:19634): prog-id=1178 op=LOAD
type=BPF msg=audit(1781253941.172:19635): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.172:19636): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.183:19637): prog-id=1179 op=LOAD
type=BPF msg=audit(1781253941.183:19638): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.194:19639): prog-id=1180 op=LOAD
type=BPF msg=audit(1781253941.194:19640): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.194:19641): prog-id=1181 op=LOAD
type=BPF msg=audit(1781253941.194:19642): prog-id=1182 op=LOAD
type=BPF msg=audit(1781253941.194:19643): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.194:19644): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.213:19645): prog-id=1183 op=LOAD
type=BPF msg=audit(1781253941.214:19646): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.214:19647): prog-id=1184 op=LOAD
type=BPF msg=audit(1781253941.214:19648): prog-id=1185 op=LOAD
type=BPF msg=audit(1781253941.214:19649): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.214:19650): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253941.217:19651): prog-id=1186 op=LOAD
type=BPF msg=audit(1781253941.217:19652): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253941.293:19653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253941.317:19654): pid=128085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253941.317:19655): pid=128085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253941.322:19656): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253941.322:19657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253941.849:19658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253941.849:19659): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253941.903:19660): pid=128235 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253941.903:19661): pid=128235 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F6F787877797764746F7977686C717061777076656A776A64757977687578203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253941.905:19662): pid=128235 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253941.912:19663): pid=128235 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253941.916:19664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253942.039:19665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253942.706:19666): prog-id=1187 op=LOAD
type=BPF msg=audit(1781253942.706:19667): prog-id=1188 op=LOAD
type=BPF msg=audit(1781253942.706:19668): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.706:19669): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.715:19670): prog-id=1189 op=LOAD
type=BPF msg=audit(1781253942.715:19671): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.722:19672): prog-id=1190 op=LOAD
type=BPF msg=audit(1781253942.722:19673): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.722:19674): prog-id=1191 op=LOAD
type=BPF msg=audit(1781253942.722:19675): prog-id=1192 op=LOAD
type=BPF msg=audit(1781253942.722:19676): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.722:19677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.733:19678): prog-id=1193 op=LOAD
type=BPF msg=audit(1781253942.733:19679): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.733:19680): prog-id=1194 op=LOAD
type=BPF msg=audit(1781253942.733:19681): prog-id=1195 op=LOAD
type=BPF msg=audit(1781253942.734:19682): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.734:19683): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253942.737:19684): prog-id=1196 op=LOAD
type=BPF msg=audit(1781253942.737:19685): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253942.844:19686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253942.863:19687): pid=128235 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253942.863:19688): pid=128235 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253942.867:19689): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253942.867:19690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253943.611:19691): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253943.611:19692): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253943.666:19693): pid=128433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253943.666:19694): pid=128433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70676F757A6C6C69636B736761786D686D75626E6E6D6870797365696E697275203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253943.667:19695): pid=128433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253943.672:19696): pid=128433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253944.212:19697): pid=127704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127747 suid=74 rport=19330 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253944.213:19698): pid=127704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=127747 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253944.213:19699): pid=127704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=127704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253944.213:19700): pid=127704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253944.494:19701): prog-id=1197 op=LOAD
type=BPF msg=audit(1781253944.494:19702): prog-id=1198 op=LOAD
type=BPF msg=audit(1781253944.494:19703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.494:19704): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.505:19705): prog-id=1199 op=LOAD
type=BPF msg=audit(1781253944.505:19706): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.514:19707): prog-id=1200 op=LOAD
type=BPF msg=audit(1781253944.515:19708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.515:19709): prog-id=1201 op=LOAD
type=BPF msg=audit(1781253944.515:19710): prog-id=1202 op=LOAD
type=BPF msg=audit(1781253944.515:19711): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.515:19712): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.527:19713): prog-id=1203 op=LOAD
type=BPF msg=audit(1781253944.527:19714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.527:19715): prog-id=1204 op=LOAD
type=BPF msg=audit(1781253944.527:19716): prog-id=1205 op=LOAD
type=BPF msg=audit(1781253944.527:19717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.527:19718): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253944.530:19719): prog-id=1206 op=LOAD
type=BPF msg=audit(1781253944.530:19720): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781253944.635:19721): pid=128566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=128566 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253944.636:19722): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=128566 suid=74 rport=4506 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253944.636:19723): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=128566 suid=74 rport=4506 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253944.674:19724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253944.696:19725): pid=128433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253944.696:19726): pid=128433 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253944.700:19727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253944.700:19728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253945.301:19729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253945.301:19730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253945.365:19731): pid=128602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253945.365:19732): pid=128602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7479796173716A6B6B66616975686F626573716C767A6A64746F797670706379203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253945.366:19733): pid=128602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253945.372:19734): pid=128602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253945.382:19735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253945.467:19736): pid=128619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=128619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253945.611:19737): pid=128617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=128619 suid=74 rport=42458 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253945.611:19738): pid=128617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=128619 suid=74 rport=42458 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781253945.712:19739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253946.221:19740): prog-id=1207 op=LOAD
type=BPF msg=audit(1781253946.221:19741): prog-id=1208 op=LOAD
type=BPF msg=audit(1781253946.221:19742): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.221:19743): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.230:19744): prog-id=1209 op=LOAD
type=BPF msg=audit(1781253946.230:19745): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.236:19746): prog-id=1210 op=LOAD
type=BPF msg=audit(1781253946.236:19747): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.236:19748): prog-id=1211 op=LOAD
type=BPF msg=audit(1781253946.236:19749): prog-id=1212 op=LOAD
type=BPF msg=audit(1781253946.236:19750): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.236:19751): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.246:19752): prog-id=1213 op=LOAD
type=BPF msg=audit(1781253946.246:19753): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.246:19754): prog-id=1214 op=LOAD
type=BPF msg=audit(1781253946.246:19755): prog-id=1215 op=LOAD
type=BPF msg=audit(1781253946.246:19756): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.246:19757): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253946.248:19758): prog-id=1216 op=LOAD
type=BPF msg=audit(1781253946.248:19759): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253946.359:19760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253946.376:19761): pid=128602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253946.377:19762): pid=128602 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253946.380:19763): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253946.380:19764): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253946.525:19765): pid=128617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sol" exe="/usr/sbin/sshd" hostname=45.148.10.183 addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253946.815:19766): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="applvis" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253947.033:19767): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253947.033:19768): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253947.101:19769): pid=128783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253947.102:19770): pid=128783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6274667876716D7A646D65756962696D6C616E696E637161716D6B637A6D6E6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253947.103:19771): pid=128783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253947.109:19772): pid=128783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253947.117:19773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253947.283:19774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253947.854:19775): prog-id=1217 op=LOAD
type=BPF msg=audit(1781253947.854:19776): prog-id=1218 op=LOAD
type=BPF msg=audit(1781253947.854:19777): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.854:19778): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.863:19779): prog-id=1219 op=LOAD
type=BPF msg=audit(1781253947.863:19780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.870:19781): prog-id=1220 op=LOAD
type=BPF msg=audit(1781253947.870:19782): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.870:19783): prog-id=1221 op=LOAD
type=BPF msg=audit(1781253947.871:19784): prog-id=1222 op=LOAD
type=BPF msg=audit(1781253947.871:19785): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.871:19786): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.882:19787): prog-id=1223 op=LOAD
type=BPF msg=audit(1781253947.882:19788): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.882:19789): prog-id=1224 op=LOAD
type=BPF msg=audit(1781253947.882:19790): prog-id=1225 op=LOAD
type=BPF msg=audit(1781253947.882:19791): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.882:19792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253947.885:19793): prog-id=1226 op=LOAD
type=BPF msg=audit(1781253947.885:19794): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253947.909:19795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253948.186:19796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253948.720:19797): prog-id=1227 op=LOAD
type=BPF msg=audit(1781253948.720:19798): prog-id=1228 op=LOAD
type=BPF msg=audit(1781253948.720:19799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.720:19800): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.729:19801): prog-id=1229 op=LOAD
type=BPF msg=audit(1781253948.729:19802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.736:19803): prog-id=1230 op=LOAD
type=BPF msg=audit(1781253948.736:19804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.736:19805): prog-id=1231 op=LOAD
type=BPF msg=audit(1781253948.736:19806): prog-id=1232 op=LOAD
type=BPF msg=audit(1781253948.736:19807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.736:19808): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.746:19809): prog-id=1233 op=LOAD
type=BPF msg=audit(1781253948.746:19810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.746:19811): prog-id=1234 op=LOAD
type=BPF msg=audit(1781253948.746:19812): prog-id=1235 op=LOAD
type=BPF msg=audit(1781253948.746:19813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.746:19814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253948.748:19815): prog-id=1236 op=LOAD
type=BPF msg=audit(1781253948.748:19816): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253948.768:19817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_controller comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253948.789:19818): pid=128783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253948.789:19819): pid=128783 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253948.795:19820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253948.795:19821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253948.967:19822): pid=128617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128619 suid=74 rport=42458 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253948.968:19823): pid=128617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=128619 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253948.969:19824): pid=128617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=128617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253948.969:19825): pid=128617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253949.495:19826): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253949.495:19827): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253949.549:19828): pid=129050 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253949.549:19829): pid=129050 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E6F6C647064717379796C646A72766E6C6364776767636466636D6D6B6968203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253949.550:19830): pid=129050 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253949.552:19831): pid=129050 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253949.720:19832): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128566 suid=74 rport=4506 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253949.721:19833): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=128566 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253949.722:19834): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=128538 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253949.722:19835): pid=128538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253949.802:19836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253949.834:19837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253950.220:19838): pid=129154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253950.222:19839): pid=129072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=129154 suid=74 rport=4516 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253950.222:19840): pid=129072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=129154 suid=74 rport=4516 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253950.292:19841): prog-id=1237 op=LOAD
type=BPF msg=audit(1781253950.293:19842): prog-id=1238 op=LOAD
type=BPF msg=audit(1781253950.293:19843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.293:19844): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.301:19845): prog-id=1239 op=LOAD
type=BPF msg=audit(1781253950.301:19846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.307:19847): prog-id=1240 op=LOAD
type=BPF msg=audit(1781253950.307:19848): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.307:19849): prog-id=1241 op=LOAD
type=BPF msg=audit(1781253950.308:19850): prog-id=1242 op=LOAD
type=BPF msg=audit(1781253950.308:19851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.308:19852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.319:19853): prog-id=1243 op=LOAD
type=BPF msg=audit(1781253950.319:19854): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.319:19855): prog-id=1244 op=LOAD
type=BPF msg=audit(1781253950.319:19856): prog-id=1245 op=LOAD
type=BPF msg=audit(1781253950.319:19857): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.319:19858): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253950.322:19859): prog-id=1246 op=LOAD
type=BPF msg=audit(1781253950.322:19860): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253950.342:19861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253950.342:19862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253950.433:19863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_placement_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253950.458:19864): pid=129050 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253950.458:19865): pid=129050 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253950.464:19866): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253950.464:19867): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253950.971:19868): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253950.971:19869): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253951.039:19870): pid=129252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253951.039:19871): pid=129252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A6A70626A7568777573757561686174637768746E6363796864626C746E78203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253951.039:19872): pid=129252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253951.042:19873): pid=129252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253951.830:19874): prog-id=1247 op=LOAD
type=BPF msg=audit(1781253951.830:19875): prog-id=1248 op=LOAD
type=BPF msg=audit(1781253951.830:19876): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.830:19877): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.839:19878): prog-id=1249 op=LOAD
type=BPF msg=audit(1781253951.839:19879): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.846:19880): prog-id=1250 op=LOAD
type=BPF msg=audit(1781253951.846:19881): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.846:19882): prog-id=1251 op=LOAD
type=BPF msg=audit(1781253951.846:19883): prog-id=1252 op=LOAD
type=BPF msg=audit(1781253951.846:19884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.846:19885): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.857:19886): prog-id=1253 op=LOAD
type=BPF msg=audit(1781253951.857:19887): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.857:19888): prog-id=1254 op=LOAD
type=BPF msg=audit(1781253951.857:19889): prog-id=1255 op=LOAD
type=BPF msg=audit(1781253951.857:19890): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.857:19891): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253951.859:19892): prog-id=1256 op=LOAD
type=BPF msg=audit(1781253951.859:19893): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253951.974:19894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_account_auditor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253952.002:19895): pid=129252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253952.002:19896): pid=129252 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253952.007:19897): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253952.007:19898): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253952.413:19899): pid=129072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="marcos" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253952.712:19900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253952.712:19901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253952.791:19902): pid=129367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253952.792:19903): pid=129367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7469656F68766E626F6E7A7A6776756B6B7761626369646870736B7A6D76646C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253952.793:19904): pid=129367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253952.798:19905): pid=129367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253953.055:19906): pid=129373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253953.312:19907): pid=129372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=129373 suid=74 rport=47792 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253953.312:19908): pid=129372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=129373 suid=74 rport=47792 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253953.530:19909): prog-id=1257 op=LOAD
type=BPF msg=audit(1781253953.530:19910): prog-id=1258 op=LOAD
type=BPF msg=audit(1781253953.530:19911): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.530:19912): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.538:19913): prog-id=1259 op=LOAD
type=BPF msg=audit(1781253953.538:19914): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.545:19915): prog-id=1260 op=LOAD
type=BPF msg=audit(1781253953.545:19916): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.546:19917): prog-id=1261 op=LOAD
type=BPF msg=audit(1781253953.546:19918): prog-id=1262 op=LOAD
type=BPF msg=audit(1781253953.546:19919): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.546:19920): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.558:19921): prog-id=1263 op=LOAD
type=BPF msg=audit(1781253953.558:19922): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.558:19923): prog-id=1264 op=LOAD
type=BPF msg=audit(1781253953.558:19924): prog-id=1265 op=LOAD
type=BPF msg=audit(1781253953.558:19925): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.558:19926): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253953.561:19927): prog-id=1266 op=LOAD
type=BPF msg=audit(1781253953.561:19928): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253953.608:19929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253953.654:19930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_account_reaper comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253953.672:19931): pid=129367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253953.673:19932): pid=129367 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253953.676:19933): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253953.676:19934): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253953.757:19935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253954.460:19936): pid=129372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253954.531:19937): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253954.531:19938): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253954.584:19939): pid=129548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253954.584:19940): pid=129548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E6E616B6D797066797773726B696C617069706377756679666E7A656D6572203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253954.585:19941): pid=129548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253954.589:19942): pid=129548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253954.885:19943): pid=129072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129154 suid=74 rport=4516 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253954.886:19944): pid=129072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129154 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253954.887:19945): pid=129072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253954.887:19946): pid=129072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253954.912:19947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253954.914:19948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253954.916:19949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253954.967:19950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253955.191:19951): pid=129712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253955.192:19952): pid=129603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=129712 suid=74 rport=65214 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253955.192:19953): pid=129603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=129712 suid=74 rport=65214 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253955.472:19954): prog-id=1267 op=LOAD
type=BPF msg=audit(1781253955.472:19955): prog-id=1268 op=LOAD
type=BPF msg=audit(1781253955.472:19956): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.472:19957): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.482:19958): prog-id=1269 op=LOAD
type=BPF msg=audit(1781253955.482:19959): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.490:19960): prog-id=1270 op=LOAD
type=BPF msg=audit(1781253955.490:19961): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.490:19962): prog-id=1271 op=LOAD
type=BPF msg=audit(1781253955.490:19963): prog-id=1272 op=LOAD
type=BPF msg=audit(1781253955.490:19964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.490:19965): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.502:19966): prog-id=1273 op=LOAD
type=BPF msg=audit(1781253955.502:19967): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.502:19968): prog-id=1274 op=LOAD
type=BPF msg=audit(1781253955.502:19969): prog-id=1275 op=LOAD
type=BPF msg=audit(1781253955.502:19970): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.502:19971): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253955.505:19972): prog-id=1276 op=LOAD
type=BPF msg=audit(1781253955.505:19973): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253955.525:19974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253955.526:19975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253955.527:19976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253955.529:19977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253955.558:19978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253955.561:19979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253955.707:19980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253955.723:19981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253955.726:19982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_account_replicator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253955.749:19983): pid=129548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253955.749:19984): pid=129548 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253955.753:19985): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253955.753:19986): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253955.804:19987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253955.887:19988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253956.319:19989): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253956.319:19990): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253956.381:19991): pid=129931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253956.381:19992): pid=129931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786B70746E7966636B677565776666786C64737A6B6578786A6F6166707A6A6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253956.382:19993): pid=129931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253956.387:19994): pid=129931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253956.522:19995): pid=129372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129373 suid=74 rport=47792 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253956.523:19996): pid=129372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129373 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253956.524:19997): pid=129372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253956.525:19998): pid=129372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253956.669:19999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253956.688:20000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253957.163:20001): prog-id=1277 op=LOAD
type=BPF msg=audit(1781253957.163:20002): prog-id=1278 op=LOAD
type=BPF msg=audit(1781253957.163:20003): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.163:20004): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.172:20005): prog-id=1279 op=LOAD
type=BPF msg=audit(1781253957.172:20006): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.184:20007): prog-id=1280 op=LOAD
type=BPF msg=audit(1781253957.184:20008): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.184:20009): prog-id=1281 op=LOAD
type=BPF msg=audit(1781253957.184:20010): prog-id=1282 op=LOAD
type=BPF msg=audit(1781253957.184:20011): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.184:20012): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.195:20013): prog-id=1283 op=LOAD
type=BPF msg=audit(1781253957.195:20014): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.195:20015): prog-id=1284 op=LOAD
type=BPF msg=audit(1781253957.195:20016): prog-id=1285 op=LOAD
type=BPF msg=audit(1781253957.195:20017): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.195:20018): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253957.198:20019): prog-id=1286 op=LOAD
type=BPF msg=audit(1781253957.198:20020): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253957.218:20021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253957.218:20022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253957.243:20023): pid=129603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="da" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253957.297:20024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_account_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253957.319:20025): pid=129931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253957.319:20026): pid=129931 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253957.323:20027): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253957.323:20028): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253958.126:20029): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253958.126:20030): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253958.175:20031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253958.179:20032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253958.183:20033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253958.186:20034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253958.189:20035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253958.214:20036): pid=130190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253958.216:20037): pid=130190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64666D756D7278646E786B727A756461726F79766572776B7A6D696E6D6E6370203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253958.217:20038): pid=130190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253958.223:20039): pid=130190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253958.414:20040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253958.442:20041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253958.452:20042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253958.463:20043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253959.019:20044): prog-id=1287 op=LOAD
type=BPF msg=audit(1781253959.019:20045): prog-id=1288 op=LOAD
type=BPF msg=audit(1781253959.019:20046): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.019:20047): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.028:20048): prog-id=1289 op=LOAD
type=BPF msg=audit(1781253959.028:20049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.035:20050): prog-id=1290 op=LOAD
type=BPF msg=audit(1781253959.035:20051): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.035:20052): prog-id=1291 op=LOAD
type=BPF msg=audit(1781253959.035:20053): prog-id=1292 op=LOAD
type=BPF msg=audit(1781253959.035:20054): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.035:20055): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.047:20056): prog-id=1293 op=LOAD
type=BPF msg=audit(1781253959.047:20057): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.047:20058): prog-id=1294 op=LOAD
type=BPF msg=audit(1781253959.047:20059): prog-id=1295 op=LOAD
type=BPF msg=audit(1781253959.047:20060): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.047:20061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253959.049:20062): prog-id=1296 op=LOAD
type=BPF msg=audit(1781253959.049:20063): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253959.065:20064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253959.074:20065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253959.077:20066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253959.143:20067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_container_auditor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253959.163:20068): pid=130190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253959.164:20069): pid=130190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253959.169:20070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253959.169:20071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253959.308:20072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253959.361:20073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253959.922:20074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253959.922:20075): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253960.018:20076): pid=130518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253960.018:20077): pid=130518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666173666D73706E656576796E6E7A6C72756B726A66746769767572716C7668203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253960.019:20078): pid=130518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253960.023:20079): pid=130518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253960.327:20080): pid=129603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129712 suid=74 rport=65214 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253960.328:20081): pid=129603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129712 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253960.328:20082): pid=129603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=129603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253960.328:20083): pid=129603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253960.619:20084): pid=130623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=130623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253960.621:20085): pid=130534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=130623 suid=74 rport=65236 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253960.621:20086): pid=130534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=130623 suid=74 rport=65236 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253960.871:20087): prog-id=1297 op=LOAD
type=BPF msg=audit(1781253960.871:20088): prog-id=1298 op=LOAD
type=BPF msg=audit(1781253960.871:20089): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.871:20090): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.883:20091): prog-id=1299 op=LOAD
type=BPF msg=audit(1781253960.883:20092): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.893:20093): prog-id=1300 op=LOAD
type=BPF msg=audit(1781253960.893:20094): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.893:20095): prog-id=1301 op=LOAD
type=BPF msg=audit(1781253960.893:20096): prog-id=1302 op=LOAD
type=BPF msg=audit(1781253960.893:20097): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.893:20098): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.905:20099): prog-id=1303 op=LOAD
type=BPF msg=audit(1781253960.905:20100): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.905:20101): prog-id=1304 op=LOAD
type=BPF msg=audit(1781253960.905:20102): prog-id=1305 op=LOAD
type=BPF msg=audit(1781253960.905:20103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.906:20104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253960.908:20105): prog-id=1306 op=LOAD
type=BPF msg=audit(1781253960.908:20106): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253960.964:20107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253961.085:20108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_container_replicator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253961.109:20109): pid=130518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253961.109:20110): pid=130518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253961.114:20111): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253961.114:20112): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253961.173:20113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253961.525:20114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253961.529:20115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253961.532:20116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253961.716:20117): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253961.716:20118): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253961.779:20119): pid=130752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253961.779:20120): pid=130752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6163666165776C646161727461756E6E67706D62716C7A6571776F7561746874203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253961.780:20121): pid=130752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253961.785:20122): pid=130752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781253961.870:20123): pid=130534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="kado" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253961.904:20124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253962.003:20125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253962.577:20126): prog-id=1307 op=LOAD
type=BPF msg=audit(1781253962.577:20127): prog-id=1308 op=LOAD
type=BPF msg=audit(1781253962.577:20128): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.577:20129): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.586:20130): prog-id=1309 op=LOAD
type=BPF msg=audit(1781253962.586:20131): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.592:20132): prog-id=1310 op=LOAD
type=BPF msg=audit(1781253962.592:20133): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.592:20134): prog-id=1311 op=LOAD
type=BPF msg=audit(1781253962.592:20135): prog-id=1312 op=LOAD
type=BPF msg=audit(1781253962.592:20136): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.592:20137): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.603:20138): prog-id=1313 op=LOAD
type=BPF msg=audit(1781253962.603:20139): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.603:20140): prog-id=1314 op=LOAD
type=BPF msg=audit(1781253962.603:20141): prog-id=1315 op=LOAD
type=BPF msg=audit(1781253962.603:20142): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.603:20143): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253962.606:20144): prog-id=1316 op=LOAD
type=BPF msg=audit(1781253962.606:20145): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253962.634:20146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253962.676:20147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253962.767:20148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_container_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253962.796:20149): pid=130752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253962.797:20150): pid=130752 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253962.803:20151): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253962.803:20152): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253963.096:20153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253963.123:20154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253963.137:20155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253963.278:20156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253963.354:20157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253963.519:20158): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253963.519:20159): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253963.587:20160): pid=130982 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253963.587:20161): pid=130982 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667672716F78766F6F746F6E6A6862646E706279696369626F6B6B6E6C6F7977203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253963.588:20162): pid=130982 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253963.592:20163): pid=130982 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253964.422:20164): prog-id=1317 op=LOAD
type=BPF msg=audit(1781253964.422:20165): prog-id=1318 op=LOAD
type=BPF msg=audit(1781253964.422:20166): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.422:20167): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.430:20168): prog-id=1319 op=LOAD
type=BPF msg=audit(1781253964.430:20169): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.437:20170): prog-id=1320 op=LOAD
type=BPF msg=audit(1781253964.437:20171): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.437:20172): prog-id=1321 op=LOAD
type=BPF msg=audit(1781253964.437:20173): prog-id=1322 op=LOAD
type=BPF msg=audit(1781253964.437:20174): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.437:20175): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.451:20176): prog-id=1323 op=LOAD
type=BPF msg=audit(1781253964.451:20177): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.451:20178): prog-id=1324 op=LOAD
type=BPF msg=audit(1781253964.451:20179): prog-id=1325 op=LOAD
type=BPF msg=audit(1781253964.451:20180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.451:20181): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253964.454:20182): prog-id=1326 op=LOAD
type=BPF msg=audit(1781253964.454:20183): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253964.499:20184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253964.656:20185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_container_updater comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253964.684:20186): pid=130982 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253964.684:20187): pid=130982 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253964.687:20188): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253964.687:20189): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253964.790:20190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253964.797:20191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253965.053:20192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253965.193:20193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253965.193:20194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253965.224:20195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253965.262:20196): pid=131170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253965.262:20197): pid=131170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B756375777569756A6B6D746E7964736D6468766C787A656F6461747A6478203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253965.263:20198): pid=131170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253965.269:20199): pid=131170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253965.308:20200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253966.154:20201): pid=130534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=130623 suid=74 rport=65236 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253966.156:20202): pid=130534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=130623 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253966.156:20203): pid=130534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=130534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253966.156:20204): pid=130534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253966.161:20205): prog-id=1327 op=LOAD
type=BPF msg=audit(1781253966.161:20206): prog-id=1328 op=LOAD
type=BPF msg=audit(1781253966.161:20207): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.161:20208): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.169:20209): prog-id=1329 op=LOAD
type=BPF msg=audit(1781253966.169:20210): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.176:20211): prog-id=1330 op=LOAD
type=BPF msg=audit(1781253966.176:20212): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.176:20213): prog-id=1331 op=LOAD
type=BPF msg=audit(1781253966.176:20214): prog-id=1332 op=LOAD
type=BPF msg=audit(1781253966.176:20215): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.176:20216): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.187:20217): prog-id=1333 op=LOAD
type=BPF msg=audit(1781253966.187:20218): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.187:20219): prog-id=1334 op=LOAD
type=BPF msg=audit(1781253966.187:20220): prog-id=1335 op=LOAD
type=BPF msg=audit(1781253966.187:20221): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.187:20222): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253966.190:20223): prog-id=1336 op=LOAD
type=BPF msg=audit(1781253966.190:20224): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253966.242:20225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253966.385:20226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253966.388:20227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_object_auditor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253966.401:20228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253966.415:20229): pid=131170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253966.415:20230): pid=131170 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253966.419:20231): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253966.419:20232): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253966.437:20233): pid=131318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=131318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253966.439:20234): pid=131279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=131318 suid=74 rport=17012 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253966.439:20235): pid=131279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=131318 suid=74 rport=17012 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781253966.547:20236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253967.112:20237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253967.112:20238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253967.180:20239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253967.185:20240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253967.189:20241): pid=131372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253967.190:20242): pid=131372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796869667877666A7379646E636D686D796C7176676D6C65687A746B726C6363203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253967.191:20243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1781253967.191:20244): pid=131372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253967.200:20245): pid=131372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253967.472:20246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253967.527:20247): pid=131279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="botany" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253968.079:20248): prog-id=1337 op=LOAD
type=BPF msg=audit(1781253968.079:20249): prog-id=1338 op=LOAD
type=BPF msg=audit(1781253968.079:20250): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.079:20251): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.089:20252): prog-id=1339 op=LOAD
type=BPF msg=audit(1781253968.089:20253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.099:20254): prog-id=1340 op=LOAD
type=BPF msg=audit(1781253968.099:20255): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.099:20256): prog-id=1341 op=LOAD
type=BPF msg=audit(1781253968.099:20257): prog-id=1342 op=LOAD
type=BPF msg=audit(1781253968.099:20258): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.099:20259): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.114:20260): prog-id=1343 op=LOAD
type=BPF msg=audit(1781253968.114:20261): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.114:20262): prog-id=1344 op=LOAD
type=BPF msg=audit(1781253968.114:20263): prog-id=1345 op=LOAD
type=BPF msg=audit(1781253968.114:20264): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.114:20265): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253968.117:20266): prog-id=1346 op=LOAD
type=BPF msg=audit(1781253968.117:20267): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253968.146:20268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253968.147:20269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253968.167:20270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253968.310:20271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_object_expirer comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253968.355:20272): pid=131372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253968.355:20273): pid=131372 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253968.361:20274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253968.361:20275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253968.519:20276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253969.075:20277): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253969.075:20278): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253969.146:20279): pid=131622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253969.147:20280): pid=131622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717A686F727867656563786A727A69707567666876666A746C6B756D6C746567203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253969.148:20281): pid=131622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253969.153:20282): pid=131622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253969.482:20283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253970.089:20284): prog-id=1347 op=LOAD
type=BPF msg=audit(1781253970.089:20285): prog-id=1348 op=LOAD
type=BPF msg=audit(1781253970.089:20286): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.089:20287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.102:20288): prog-id=1349 op=LOAD
type=BPF msg=audit(1781253970.102:20289): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.112:20290): prog-id=1350 op=LOAD
type=BPF msg=audit(1781253970.112:20291): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.112:20292): prog-id=1351 op=LOAD
type=BPF msg=audit(1781253970.112:20293): prog-id=1352 op=LOAD
type=BPF msg=audit(1781253970.112:20294): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.112:20295): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.129:20296): prog-id=1353 op=LOAD
type=BPF msg=audit(1781253970.129:20297): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.129:20298): prog-id=1354 op=LOAD
type=BPF msg=audit(1781253970.129:20299): prog-id=1355 op=LOAD
type=BPF msg=audit(1781253970.129:20300): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.129:20301): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253970.133:20302): prog-id=1356 op=LOAD
type=BPF msg=audit(1781253970.133:20303): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781253970.151:20304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253970.161:20305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253970.297:20306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_object_replicator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253970.338:20307): pid=131622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253970.338:20308): pid=131622 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253970.344:20309): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253970.344:20310): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253970.366:20311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253970.985:20312): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253970.985:20313): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253971.002:20314): pid=131279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131318 suid=74 rport=17012 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253971.003:20315): pid=131279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=131318 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253971.005:20316): pid=131279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=131279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253971.005:20317): pid=131279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253971.051:20318): pid=131949 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253971.051:20319): pid=131949 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6777647162677A7070706A6568736B797279786F736274677A6C756D61616575203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253971.052:20320): pid=131949 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253971.056:20321): pid=131949 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253971.348:20322): pid=131964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=131964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253971.349:20323): pid=131952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=131964 suid=74 rport=5074 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253971.350:20324): pid=131952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=131964 suid=74 rport=5074 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253971.817:20325): prog-id=1357 op=LOAD
type=BPF msg=audit(1781253971.817:20326): prog-id=1358 op=LOAD
type=BPF msg=audit(1781253971.817:20327): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.817:20328): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.827:20329): prog-id=1359 op=LOAD
type=BPF msg=audit(1781253971.827:20330): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.836:20331): prog-id=1360 op=LOAD
type=BPF msg=audit(1781253971.836:20332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.836:20333): prog-id=1361 op=LOAD
type=BPF msg=audit(1781253971.836:20334): prog-id=1362 op=LOAD
type=BPF msg=audit(1781253971.836:20335): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.836:20336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.847:20337): prog-id=1363 op=LOAD
type=BPF msg=audit(1781253971.847:20338): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.847:20339): prog-id=1364 op=LOAD
type=BPF msg=audit(1781253971.847:20340): prog-id=1365 op=LOAD
type=BPF msg=audit(1781253971.847:20341): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.847:20342): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253971.850:20343): prog-id=1366 op=LOAD
type=BPF msg=audit(1781253971.851:20344): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253971.969:20345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_object_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253971.988:20346): pid=131949 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253971.988:20347): pid=131949 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253971.992:20348): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253971.992:20349): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253972.172:20350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253972.318:20351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253972.644:20352): pid=131952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="david" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253972.936:20353): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253972.936:20354): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253973.000:20355): pid=132190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253973.000:20356): pid=132190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A636E65756B6B776A79757777787A6A6362786E6C6A796C746B636D646764203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253973.001:20357): pid=132190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253973.006:20358): pid=132190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253973.778:20359): prog-id=1367 op=LOAD
type=BPF msg=audit(1781253973.779:20360): prog-id=1368 op=LOAD
type=BPF msg=audit(1781253973.779:20361): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.779:20362): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.787:20363): prog-id=1369 op=LOAD
type=BPF msg=audit(1781253973.787:20364): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.795:20365): prog-id=1370 op=LOAD
type=BPF msg=audit(1781253973.795:20366): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.795:20367): prog-id=1371 op=LOAD
type=BPF msg=audit(1781253973.795:20368): prog-id=1372 op=LOAD
type=BPF msg=audit(1781253973.795:20369): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.795:20370): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.807:20371): prog-id=1373 op=LOAD
type=BPF msg=audit(1781253973.807:20372): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.807:20373): prog-id=1374 op=LOAD
type=BPF msg=audit(1781253973.807:20374): prog-id=1375 op=LOAD
type=BPF msg=audit(1781253973.807:20375): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.808:20376): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253973.811:20377): prog-id=1376 op=LOAD
type=BPF msg=audit(1781253973.811:20378): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253973.945:20379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_object_updater comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253973.970:20380): pid=132190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253973.971:20381): pid=132190 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253973.977:20382): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253973.977:20383): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253974.677:20384): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253974.677:20385): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253974.745:20386): pid=132309 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253974.746:20387): pid=132309 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79697071676F7967766B6563786364666666676A7079656270656673646F6B65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253974.747:20388): pid=132309 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253974.755:20389): pid=132309 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253975.286:20390): pid=131952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131964 suid=74 rport=5074 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253975.287:20391): pid=131952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=131964 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253975.288:20392): pid=131952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=131952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253975.288:20393): pid=131952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781253975.680:20394): prog-id=1377 op=LOAD
type=BPF msg=audit(1781253975.680:20395): prog-id=1378 op=LOAD
type=BPF msg=audit(1781253975.680:20396): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.680:20397): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781253975.683:20398): pid=132374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=132374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253975.685:20399): pid=132373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=132374 suid=74 rport=5086 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253975.686:20400): pid=132373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=132374 suid=74 rport=5086 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781253975.689:20401): prog-id=1379 op=LOAD
type=BPF msg=audit(1781253975.690:20402): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.696:20403): prog-id=1380 op=LOAD
type=BPF msg=audit(1781253975.696:20404): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.696:20405): prog-id=1381 op=LOAD
type=BPF msg=audit(1781253975.696:20406): prog-id=1382 op=LOAD
type=BPF msg=audit(1781253975.696:20407): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.696:20408): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.708:20409): prog-id=1383 op=LOAD
type=BPF msg=audit(1781253975.708:20410): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.708:20411): prog-id=1384 op=LOAD
type=BPF msg=audit(1781253975.708:20412): prog-id=1385 op=LOAD
type=BPF msg=audit(1781253975.708:20413): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.708:20414): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253975.713:20415): prog-id=1386 op=LOAD
type=BPF msg=audit(1781253975.713:20416): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253975.741:20417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253975.876:20418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253975.909:20419): pid=132309 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253975.909:20420): pid=132309 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253975.914:20421): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253975.914:20422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253976.130:20423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253976.421:20424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253976.421:20425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253976.479:20426): pid=132493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253976.480:20427): pid=132493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62746A666A736465737571636873686174756A786A776B62636568616A766877203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253976.480:20428): pid=132493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253976.485:20429): pid=132493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1781253977.293:20430): prog-id=1387 op=LOAD
type=BPF msg=audit(1781253977.293:20431): prog-id=1388 op=LOAD
type=BPF msg=audit(1781253977.293:20432): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.293:20433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.302:20434): prog-id=1389 op=LOAD
type=BPF msg=audit(1781253977.302:20435): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.309:20436): prog-id=1390 op=LOAD
type=BPF msg=audit(1781253977.309:20437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.309:20438): prog-id=1391 op=LOAD
type=BPF msg=audit(1781253977.309:20439): prog-id=1392 op=LOAD
type=BPF msg=audit(1781253977.309:20440): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.309:20441): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.321:20442): prog-id=1393 op=LOAD
type=BPF msg=audit(1781253977.321:20443): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.321:20444): prog-id=1394 op=LOAD
type=BPF msg=audit(1781253977.321:20445): prog-id=1395 op=LOAD
type=BPF msg=audit(1781253977.321:20446): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.321:20447): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253977.324:20448): prog-id=1396 op=LOAD
type=BPF msg=audit(1781253977.324:20449): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253977.368:20450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253977.500:20451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253977.552:20452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_proxy_tls_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253977.596:20453): pid=132493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253977.596:20454): pid=132493 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253977.600:20455): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253977.600:20456): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253977.851:20457): pid=132373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="b" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253978.307:20458): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253978.307:20459): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253978.380:20460): pid=132624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253978.381:20461): pid=132624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73676577756C63717366626D656578766C686870706F6C627A65787666637A69203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253978.382:20462): pid=132624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253978.388:20463): pid=132624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253978.405:20464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253978.571:20465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781253979.253:20466): prog-id=1397 op=LOAD
type=BPF msg=audit(1781253979.254:20467): prog-id=1398 op=LOAD
type=BPF msg=audit(1781253979.254:20468): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.254:20469): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.262:20470): prog-id=1399 op=LOAD
type=BPF msg=audit(1781253979.262:20471): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.270:20472): prog-id=1400 op=LOAD
type=BPF msg=audit(1781253979.270:20473): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.270:20474): prog-id=1401 op=LOAD
type=BPF msg=audit(1781253979.270:20475): prog-id=1402 op=LOAD
type=BPF msg=audit(1781253979.270:20476): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.270:20477): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.281:20478): prog-id=1403 op=LOAD
type=BPF msg=audit(1781253979.281:20479): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.281:20480): prog-id=1404 op=LOAD
type=BPF msg=audit(1781253979.281:20481): prog-id=1405 op=LOAD
type=BPF msg=audit(1781253979.281:20482): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.281:20483): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781253979.284:20484): prog-id=1406 op=LOAD
type=BPF msg=audit(1781253979.284:20485): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781253979.427:20486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_swift_rsync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253979.455:20487): pid=132624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253979.455:20488): pid=132624 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253979.459:20489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253979.459:20490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253979.517:20491): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253979.517:20492): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253979.546:20493): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253979.546:20494): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253979.704:20495): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253979.704:20496): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253979.766:20497): pid=132802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253979.766:20498): pid=132802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F78656B7368656A62616E616D66627A796A616E7277757261617A76656C6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253979.767:20499): pid=132802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253979.772:20500): pid=132802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253979.994:20501): pid=132802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253979.995:20502): pid=132802 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253979.999:20503): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253979.999:20504): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253980.318:20505): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253980.318:20506): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253980.348:20507): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253980.348:20508): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253980.389:20509): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253980.389:20510): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253980.417:20511): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253980.417:20512): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253980.460:20513): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253980.460:20514): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253980.509:20515): pid=132876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253980.510:20516): pid=132876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78747068727A67716965736C76677A74776C717672696969727866796C626B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253980.511:20517): pid=132876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253980.515:20518): pid=132876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253980.528:20519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253980.533:20520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253980.639:20521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253980.659:20522): pid=132876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253980.659:20523): pid=132876 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253980.663:20524): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253980.663:20525): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253980.703:20526): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253980.704:20527): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253980.745:20528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253980.745:20529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253980.774:20530): pid=132373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132374 suid=74 rport=5086 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253980.775:20531): pid=132373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=132374 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253980.776:20532): pid=132373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=132373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253980.776:20533): pid=132373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253980.787:20534): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253980.787:20535): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253980.812:20536): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253980.812:20537): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253980.814:20538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253980.852:20539): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253980.853:20540): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253980.918:20541): pid=133017 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253980.918:20542): pid=133017 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717A73616669666F6D6F766C656871687A70667A6F6A767174676A677076786E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253980.920:20543): pid=133017 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253980.923:20544): pid=133017 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253981.122:20545): pid=133017 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253981.123:20546): pid=133017 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253981.127:20547): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253981.127:20548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253981.169:20549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253981.169:20550): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253981.210:20551): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253981.210:20552): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253981.218:20553): pid=133043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253981.220:20554): pid=133007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=133043 suid=74 rport=62292 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253981.221:20555): pid=133007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=133043 suid=74 rport=62292 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781253981.355:20556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253981.355:20557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253981.434:20558): pid=133064 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253981.434:20559): pid=133064 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77616D627A6A6C6E7365677A6E78756A65727A736A7A736D7262686B72747963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253981.435:20560): pid=133064 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253981.439:20561): pid=133064 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253981.729:20562): pid=133064 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253981.729:20563): pid=133064 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253981.732:20564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253981.732:20565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253982.030:20566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253982.030:20567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253982.087:20568): pid=133096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253982.087:20569): pid=133096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A64616868636965697375796B6C6169757764726F796A636C74676A6D6D7575203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253982.088:20570): pid=133096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253982.090:20571): pid=133096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253982.251:20572): pid=133096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253982.251:20573): pid=133096 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253982.254:20574): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253982.254:20575): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253982.497:20576): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253982.497:20577): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253982.552:20578): pid=133128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253982.552:20579): pid=133128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747579656F747A6E6B707568677A6E62626476797172676A756B62676A66737A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253982.553:20580): pid=133128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253982.556:20581): pid=133128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253982.754:20582): pid=133128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253982.755:20583): pid=133128 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253982.760:20584): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253982.760:20585): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781253982.969:20586): pid=133007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ar" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253984.177:20587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253984.362:20588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253986.180:20589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253986.183:20590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253986.186:20591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253986.189:20592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253986.196:20593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253986.198:20594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253986.204:20595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253986.462:20596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253986.473:20597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253986.493:20598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253986.515:20599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253986.549:20600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253986.599:20601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253986.652:20602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253987.234:20603): pid=133587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1781253987.292:20604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253987.294:20605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253987.493:20606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253987.526:20607): pid=133657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781253987.548:20608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253987.621:20609): pid=133656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=133657 suid=74 rport=41324 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253987.621:20610): pid=133656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=133657 suid=74 rport=41324 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253987.825:20611): pid=133007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133043 suid=74 rport=62292 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253987.826:20612): pid=133007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133043 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253987.827:20613): pid=133007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253987.827:20614): pid=133007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781253988.023:20615): pid=133586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=133587 suid=74 rport=46242 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253988.024:20616): pid=133586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=133587 suid=74 rport=46242 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253988.106:20617): pid=133656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="casino" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253988.253:20618): pid=133707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133707 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253988.253:20619): pid=133694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=133707 suid=74 rport=62300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253988.254:20620): pid=133694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=133707 suid=74 rport=62300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781253988.969:20621): pid=133586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253989.176:20622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253989.180:20623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253989.184:20624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253989.188:20625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253989.192:20626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253989.344:20627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253989.369:20628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253989.406:20629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253989.445:20630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253989.507:20631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253989.525:20632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253989.551:20633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253989.585:20634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253989.713:20635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253989.798:20636): pid=133694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="newuser" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253991.369:20637): pid=134096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=134096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253991.503:20638): pid=134095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=134096 suid=74 rport=57414 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253991.503:20639): pid=134095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=134096 suid=74 rport=57414 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253992.046:20640): pid=133656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133657 suid=74 rport=41324 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253992.046:20641): pid=133656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133657 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253992.047:20642): pid=133656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253992.047:20643): pid=133656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253992.075:20644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253992.080:20645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253992.084:20646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253992.152:20647): pid=134095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ivan" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253992.320:20648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253992.370:20649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253992.419:20650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253992.751:20651): pid=133586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133587 suid=74 rport=46242 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253992.751:20652): pid=133586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133587 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253992.752:20653): pid=133586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253992.752:20654): pid=133586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253992.770:20655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253992.837:20656): pid=133694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133707 suid=74 rport=62300 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253992.837:20657): pid=133694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133707 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253992.838:20658): pid=133694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=133694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253992.838:20659): pid=133694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253993.172:20660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253993.310:20661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253993.318:20662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253993.362:20663): pid=134403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=134403 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253993.363:20664): pid=134303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=134403 suid=74 rport=36864 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253993.363:20665): pid=134303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=134403 suid=74 rport=36864 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781253993.426:20666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253993.488:20667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253993.559:20668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253993.655:20669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253995.061:20670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781253995.065:20671): pid=134303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="meira" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253995.430:20672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253995.433:20673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253995.434:20674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253995.633:20675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253995.795:20676): pid=134095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134096 suid=74 rport=57414 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253995.795:20677): pid=134095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=134096 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253995.796:20678): pid=134095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=134095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253995.796:20679): pid=134095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253995.956:20680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253996.599:20681): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253996.599:20682): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253996.637:20683): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253996.637:20684): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253996.678:20685): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253996.678:20686): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253996.719:20687): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253996.719:20688): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253996.760:20689): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253996.760:20690): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253996.826:20691): pid=134709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253996.827:20692): pid=134709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7564616F64686574716176647A63756E73646463716F7162617862726E616877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253996.828:20693): pid=134709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253996.835:20694): pid=134709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781253996.854:20695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253996.858:20696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253997.053:20697): pid=134709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253997.054:20698): pid=134709 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253997.059:20699): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253997.059:20700): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253997.084:20701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253997.105:20702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253997.109:20703): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253997.109:20704): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253997.139:20705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253997.139:20706): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253997.181:20707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253997.181:20708): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253997.208:20709): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253997.208:20710): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253997.250:20711): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253997.250:20712): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253997.300:20713): pid=134808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253997.300:20714): pid=134808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C73676D62687A6962796F69716B7363737765676C756C7277747A6D6B7866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253997.300:20715): pid=134808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253997.304:20716): pid=134808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253997.500:20717): pid=134808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253997.500:20718): pid=134808 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253997.504:20719): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253997.504:20720): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253997.550:20721): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253997.550:20722): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781253997.584:20723): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253997.584:20724): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781253998.176:20725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253998.180:20726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253998.184:20727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781253998.370:20728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253998.370:20729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781253998.424:20730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781253998.432:20731): pid=134928 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253998.433:20732): pid=134928 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F777975657861796E7A7573706E6B69667563616C6D696273656A6C736F6B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253998.433:20733): pid=134928 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253998.436:20734): pid=134928 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781253998.474:20735): pid=134303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134403 suid=74 rport=36864 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253998.476:20736): pid=134303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=134403 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781253998.476:20737): pid=134303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=134303 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781253998.476:20738): pid=134303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253998.504:20739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781253998.550:20740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781253998.564:20741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781253998.875:20742): pid=135023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781253998.876:20743): pid=134946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=135023 suid=74 rport=36870 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781253998.876:20744): pid=134946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=135023 suid=74 rport=36870 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781253998.926:20745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781253999.155:20746): pid=134928 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781253999.155:20747): pid=134928 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781253999.159:20748): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781253999.159:20749): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781253999.342:20750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781253999.342:20751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781253999.407:20752): pid=135048 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781253999.407:20753): pid=135048 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6875686770686A6777627769626E62626470676768736263616D706C6B626863203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781253999.408:20754): pid=135048 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781253999.413:20755): pid=135048 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254000.175:20756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254000.341:20757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254000.665:20758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254000.667:20759): pid=134946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="montaro" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254000.891:20760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254002.532:20761): pid=135450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254002.748:20762): pid=135448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=135450 suid=74 rport=63994 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254002.748:20763): pid=135448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=135450 suid=74 rport=63994 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254003.175:20764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254003.350:20765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254003.732:20766): pid=135448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jose" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254003.844:20767): pid=134946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135023 suid=74 rport=36870 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254003.844:20768): pid=134946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135023 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254003.845:20769): pid=134946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=134946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254003.845:20770): pid=134946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254004.226:20771): pid=135536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254004.228:20772): pid=135527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=135536 suid=74 rport=59216 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254004.228:20773): pid=135527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=135536 suid=74 rport=59216 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254005.982:20774): pid=135527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="debian" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254006.181:20775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254006.511:20776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254007.911:20777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254007.951:20778): pid=135448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135450 suid=74 rport=63994 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254007.951:20779): pid=135448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135450 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254007.952:20780): pid=135448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254007.952:20781): pid=135448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254008.102:20782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254008.734:20783): pid=135048 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254008.734:20784): pid=135048 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254008.740:20785): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254008.740:20786): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254008.887:20787): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254008.887:20788): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254008.947:20789): pid=135857 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254008.947:20790): pid=135857 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D766A6E696F6B756A626D756B786E776279656E79796B6A75736C74686577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254008.948:20791): pid=135857 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254008.952:20792): pid=135857 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254008.968:20793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254009.134:20794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254009.159:20795): pid=135857 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254009.159:20796): pid=135857 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254009.163:20797): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254009.164:20798): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254009.349:20799): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254009.349:20800): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254009.400:20801): pid=135527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135536 suid=74 rport=59216 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254009.401:20802): pid=135527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135536 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254009.402:20803): pid=135527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254009.402:20804): pid=135527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254009.410:20805): pid=135916 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254009.410:20806): pid=135916 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D686D6A706F6D716470676667626F747174756F7878706E7867736F64716B65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254009.412:20807): pid=135916 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254009.415:20808): pid=135916 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254009.660:20809): pid=135924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254009.661:20810): pid=135919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=135924 suid=74 rport=59238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254009.661:20811): pid=135919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=135924 suid=74 rport=59238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781254009.806:20812): pid=135916 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254009.806:20813): pid=135916 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254009.810:20814): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254009.810:20815): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254009.931:20816): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254009.931:20817): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254009.998:20818): pid=135954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254009.998:20819): pid=135954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76796D616D666667637577666F6E646268776C727172647A686264706F6B6365203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254009.999:20820): pid=135954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254010.004:20821): pid=135954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254010.190:20822): pid=135954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254010.190:20823): pid=135954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254010.195:20824): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254010.196:20825): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781254010.673:20826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254010.805:20827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254011.071:20828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254011.074:20829): pid=135919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jordan" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254011.083:20830): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254011.083:20831): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254011.160:20832): pid=136066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254011.161:20833): pid=136066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70767068716C6D686B6F70676C6777626369646E6B7778797A66666D6C6B6D74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254011.163:20834): pid=136066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254011.166:20835): pid=136066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254011.289:20836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254011.912:20837): pid=136066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254011.912:20838): pid=136066 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254011.915:20839): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254011.915:20840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254012.103:20841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254012.103:20842): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254012.168:20843): pid=136138 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254012.168:20844): pid=136138 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6F63657A736F7A63696C7178676768766D716E6F726972706B686668716E77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254012.169:20845): pid=136138 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254012.172:20846): pid=136138 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254014.578:20847): pid=135919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135924 suid=74 rport=59238 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254014.579:20848): pid=135919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135924 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254014.580:20849): pid=135919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=135919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254014.580:20850): pid=135919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254014.594:20851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254014.785:20852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254014.837:20853): pid=136362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=136362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254014.838:20854): pid=136344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=136362 suid=74 rport=48846 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254014.838:20855): pid=136344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=136362 suid=74 rport=48846 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254016.150:20856): pid=136344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="eve" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.179:20857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.182:20858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.184:20859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.191:20860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.194:20861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.197:20862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.200:20863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.471:20864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.515:20865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.524:20866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.548:20867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254017.568:20868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.581:20869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.592:20870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.598:20871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.681:20872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.731:20873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254017.764:20874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254020.168:20875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254020.171:20876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254020.174:20877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254020.176:20878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254020.179:20879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254020.181:20880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254020.183:20881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254020.424:20882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254020.450:20883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254020.565:20884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254020.589:20885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254020.606:20886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254020.613:20887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254020.632:20888): pid=136344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136362 suid=74 rport=48846 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254020.633:20889): pid=136344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=136362 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254020.634:20890): pid=136344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=136344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254020.634:20891): pid=136344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254020.642:20892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254020.892:20893): pid=137243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254020.893:20894): pid=137241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=137243 suid=74 rport=48866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254020.893:20895): pid=137241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=137243 suid=74 rport=48866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781254021.397:20896): pid=136138 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254021.398:20897): pid=136138 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254021.401:20898): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254021.401:20899): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254021.580:20900): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254021.580:20901): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254021.654:20902): pid=137334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254021.654:20903): pid=137334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72717A696F6B636E686E73636C736277767068767167657A7371666B7A787570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254021.655:20904): pid=137334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254021.661:20905): pid=137334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254021.864:20906): pid=137334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254021.865:20907): pid=137334 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254021.868:20908): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254021.868:20909): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254022.007:20910): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254022.007:20911): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254022.072:20912): pid=137361 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254022.072:20913): pid=137361 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C646C6F796D686D6A76706365726A7864687A62637A626C686A7A64787A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254022.073:20914): pid=137361 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254022.075:20915): pid=137361 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781254022.147:20916): pid=137241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="proxyuser" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254022.413:20917): pid=137361 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254022.414:20918): pid=137361 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254022.418:20919): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254022.418:20920): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254022.553:20921): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254022.553:20922): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254022.619:20923): pid=137397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254022.619:20924): pid=137397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71796375776677676C626A6465776C6B6D6872617A7A686B7A67776E7A6F6966203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254022.620:20925): pid=137397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254022.624:20926): pid=137397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254022.643:20927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254022.649:20928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254022.654:20929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254022.784:20930): pid=137397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254022.784:20931): pid=137397 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254022.788:20932): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254022.788:20933): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254022.874:20934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254022.924:20935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254022.945:20936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254023.234:20937): pid=137496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254023.236:20938): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=137496 suid=74 rport=38080 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=93.118.162.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254023.236:20939): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=137496 suid=74 rport=38080 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=93.118.162.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781254023.537:20940): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254023.537:20941): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254023.606:20942): pid=137518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254023.606:20943): pid=137518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B626871687061687868756A61627077686374616C6C6173676A736867687961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254023.608:20944): pid=137518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254023.615:20945): pid=137518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254023.629:20946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254023.633:20947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254023.637:20948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254023.763:20949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254023.884:20950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254024.036:20951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254024.047:20952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254024.117:20953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254024.355:20954): pid=137518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254024.356:20955): pid=137518 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254024.359:20956): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254024.359:20957): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781254024.485:20958): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="blank" exe="/usr/sbin/sshd" hostname=93.118.162.43 addr=93.118.162.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254024.593:20959): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254024.593:20960): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254024.664:20961): pid=137673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254024.664:20962): pid=137673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D6E6A7064636F7868666E786B7476676378796B7672676A6D6B6377696B70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254024.665:20963): pid=137673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254024.668:20964): pid=137673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254025.173:20965): pid=137241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137243 suid=74 rport=48866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254025.174:20966): pid=137241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137243 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254025.175:20967): pid=137241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254025.175:20968): pid=137241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254025.580:20969): pid=137697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254025.582:20970): pid=137688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=137697 suid=74 rport=51460 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254025.582:20971): pid=137688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=137697 suid=74 rport=51460 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254026.169:20972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254026.171:20973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254026.173:20974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254026.394:20975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254026.471:20976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254026.784:20977): pid=137688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="christine" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254026.896:20978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254027.171:20979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254027.175:20980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254027.354:20981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254027.370:20982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254028.644:20983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254028.646:20984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254028.649:20985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254028.884:20986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254028.920:20987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254028.968:20988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254028.993:20989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254029.077:20990): pid=138053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="blank" exe="/usr/sbin/sshd" hostname=93.118.162.43 addr=93.118.162.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254029.258:20991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254030.786:20992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254030.924:20993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254030.928:20994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254031.115:20995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254031.221:20996): pid=137688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137697 suid=74 rport=51460 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254031.222:20997): pid=137688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137697 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254031.223:20998): pid=137688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254031.223:20999): pid=137688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254031.273:21000): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=93.118.162.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254031.677:21001): pid=138564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254031.678:21002): pid=138536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=138564 suid=74 rport=62060 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254031.678:21003): pid=138536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=138564 suid=74 rport=62060 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254031.761:21004): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137496 suid=74 rport=38080 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=93.118.162.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254031.761:21005): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137496 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254031.763:21006): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254031.763:21007): pid=137479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=93.118.162.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254032.796:21008): pid=138536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="dnsadmin" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254033.448:21009): pid=137673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254033.448:21010): pid=137673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254033.454:21011): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254033.454:21012): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254033.604:21013): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254033.604:21014): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254033.666:21015): pid=138642 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254033.666:21016): pid=138642 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F67797A6C786D617372726F71617A787A7471726576656F6161766D7A706574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254033.667:21017): pid=138642 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254033.674:21018): pid=138642 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254033.687:21019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254033.875:21020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254033.890:21021): pid=138642 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254033.890:21022): pid=138642 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254033.895:21023): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254033.895:21024): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254034.073:21025): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254034.073:21026): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254034.144:21027): pid=138690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254034.144:21028): pid=138690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796E7271706D7572797169766D706B7879737062786972756D7A706C61717561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254034.145:21029): pid=138690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254034.148:21030): pid=138690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254034.516:21031): pid=138690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254034.517:21032): pid=138690 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254034.522:21033): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254034.522:21034): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254034.658:21035): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254034.658:21036): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254034.719:21037): pid=138726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254034.719:21038): pid=138726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7162797171766E666E6E7276687A696E64696876776261727A74696E67786968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254034.719:21039): pid=138726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254034.721:21040): pid=138726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254034.854:21041): pid=138726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254034.854:21042): pid=138726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254034.860:21043): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254034.860:21044): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254035.225:21045): pid=138536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138564 suid=74 rport=62060 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254035.226:21046): pid=138536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138564 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254035.227:21047): pid=138536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254035.227:21048): pid=138536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254035.352:21049): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254035.352:21050): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254035.425:21051): pid=138751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254035.425:21052): pid=138751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64626274637169616A6F79756B6F736370776563616D76726F6A6C70656F7370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254035.428:21053): pid=138751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254035.432:21054): pid=138751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254035.732:21055): pid=138785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254035.733:21056): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=138785 suid=74 rport=62068 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254035.734:21057): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=138785 suid=74 rport=62068 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781254035.927:21058): pid=138751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254035.928:21059): pid=138751 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254035.932:21060): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254035.932:21061): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254036.111:21062): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254036.111:21063): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254036.181:21064): pid=138822 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254036.182:21065): pid=138822 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756761627862797564696570657765676162676C707A697670766D6667786377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254036.182:21066): pid=138822 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254036.186:21067): pid=138822 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254036.571:21068): pid=138822 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254036.571:21069): pid=138822 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254036.575:21070): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254036.576:21071): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781254036.631:21072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254036.673:21073): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254036.673:21074): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254036.735:21075): pid=138938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254036.735:21076): pid=138938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669736B72626E6562776F697A77666369717378766F74686B65676B626E6766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254036.735:21077): pid=138938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254036.739:21078): pid=138938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254037.000:21079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254037.145:21080): pid=138987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1781254037.145:21081): pid=138988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254037.146:21082): pid=137721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=138987 suid=74 rport=38068 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254037.146:21083): pid=137721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=138987 suid=74 rport=38068 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254037.147:21084): pid=137721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138987 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254037.147:21085): pid=137721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=137721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254037.147:21086): pid=137721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254037.164:21087): pid=138938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254037.164:21088): pid=138938 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254037.168:21089): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254037.168:21090): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1781254037.177:21091): pid=138985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=138988 suid=74 rport=53462 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254037.177:21092): pid=138985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=138988 suid=74 rport=53462 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781254037.260:21093): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254037.260:21094): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781254037.335:21095): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="r00t" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254037.342:21096): pid=139015 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254037.342:21097): pid=139015 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727177736977786A6274667A65787472767068687A776A7A6B73737279756F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254037.343:21098): pid=139015 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254037.347:21099): pid=139015 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781254037.440:21100): pid=138985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ivan" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254037.762:21101): pid=139015 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254037.762:21102): pid=139015 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254037.766:21103): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254037.766:21104): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254037.861:21105): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254037.861:21106): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254037.904:21107): pid=139078 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254037.904:21108): pid=139078 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E69786C7568706571666F686C747262626F63746B7372637470796974717967203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254037.905:21109): pid=139078 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254037.908:21110): pid=139078 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254038.151:21111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254038.258:21112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254038.306:21113): pid=139078 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254038.307:21114): pid=139078 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254038.311:21115): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254038.311:21116): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254038.408:21117): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254038.408:21118): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254038.463:21119): pid=139153 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254038.463:21120): pid=139153 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686674706B756F756D6570636468736468736664726B72726670736F6B6F6B6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254038.465:21121): pid=139153 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254038.469:21122): pid=139153 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254038.919:21123): pid=139153 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254038.919:21124): pid=139153 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254038.923:21125): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254038.924:21126): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254039.008:21127): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254039.008:21128): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254039.080:21129): pid=139225 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254039.081:21130): pid=139225 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647769626F6D7A646E6B6F706E6A6D7064737176786571726278797574726673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254039.083:21131): pid=139225 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254039.088:21132): pid=139225 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254039.174:21133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254039.377:21134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254039.490:21135): pid=139225 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254039.490:21136): pid=139225 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254039.495:21137): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254039.495:21138): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254039.586:21139): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254039.586:21140): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254039.645:21141): pid=139346 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254039.646:21142): pid=139346 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6773626368627466787A6361647867656471636E727571766663666169716664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254039.647:21143): pid=139346 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254039.650:21144): pid=139346 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254040.042:21145): pid=139346 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254040.042:21146): pid=139346 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254040.046:21147): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254040.046:21148): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254040.131:21149): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254040.131:21150): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254040.196:21151): pid=139411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254040.196:21152): pid=139411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A666574746B656B6F707675726C766F7672746369786D776D65726D66746376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254040.197:21153): pid=139411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254040.200:21154): pid=139411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254040.356:21155): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138785 suid=74 rport=62068 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254040.357:21156): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138785 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254040.358:21157): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254040.358:21158): pid=138737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254040.625:21159): pid=139411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254040.626:21160): pid=139411 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254040.630:21161): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254040.630:21162): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254040.678:21163): pid=139454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=139454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254040.680:21164): pid=139420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=139454 suid=74 rport=62084 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254040.680:21165): pid=139420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=139454 suid=74 rport=62084 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1781254040.690:21166): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254040.690:21167): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254040.761:21168): pid=139468 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254040.762:21169): pid=139468 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706A746270697666776962697178677A706F6B6B6368757A656F65696C627375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254040.762:21170): pid=139468 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254040.766:21171): pid=139468 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254040.979:21172): pid=138985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138988 suid=74 rport=53462 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254040.979:21173): pid=138985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138988 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254040.981:21174): pid=138985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=138985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254040.981:21175): pid=138985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254040.996:21176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254041.125:21177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254041.166:21178): pid=139468 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254041.167:21179): pid=139468 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254041.172:21180): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254041.172:21181): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254041.258:21182): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254041.258:21183): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254041.318:21184): pid=139550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254041.318:21185): pid=139550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C706D646F65716966636B766A756F6F78637365756367706171627774627763203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254041.319:21186): pid=139550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254041.326:21187): pid=139550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254041.343:21188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254041.545:21189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254041.807:21190): pid=139550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254041.808:21191): pid=139550 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254041.813:21192): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254041.813:21193): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254041.892:21194): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254041.892:21195): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254041.950:21196): pid=139692 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254041.950:21197): pid=139692 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736267766A726F6563697175786D7575706A796C6A616F7A6676716D646A7272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254041.951:21198): pid=139692 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254041.955:21199): pid=139692 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1781254042.295:21200): pid=139420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="paul" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254042.355:21201): pid=139692 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254042.356:21202): pid=139692 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254042.361:21203): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254042.361:21204): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254042.418:21205): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254042.418:21206): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254042.475:21207): pid=139746 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254042.475:21208): pid=139746 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6378796A79777368646B6D6A6C736569616B72776A676A6476797670646C7061203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254042.476:21209): pid=139746 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254042.479:21210): pid=139746 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254042.852:21211): pid=139746 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254042.853:21212): pid=139746 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254042.858:21213): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254042.858:21214): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254042.944:21215): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254042.944:21216): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254042.989:21217): pid=139824 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254042.989:21218): pid=139824 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6561716D636A717876696C756A61797979666E717065747972646C7A69736F64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254042.989:21219): pid=139824 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254042.992:21220): pid=139824 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254043.333:21221): pid=139824 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254043.333:21222): pid=139824 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254043.337:21223): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254043.337:21224): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254043.523:21225): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254043.523:21226): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254043.574:21227): pid=139912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254043.574:21228): pid=139912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D7A6C646465746D72676E766370747A6A71736F6D6C766967796876756874203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254043.575:21229): pid=139912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254043.579:21230): pid=139912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254043.737:21231): pid=139912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254043.737:21232): pid=139912 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254043.742:21233): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254043.742:21234): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254043.999:21235): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254043.999:21236): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254044.033:21237): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254044.033:21238): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254044.075:21239): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254044.075:21240): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254044.108:21241): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254044.108:21242): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254044.150:21243): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254044.150:21244): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254044.210:21245): pid=139983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254044.211:21246): pid=139983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A6E77787A6366636171626476616B626D646A7A78787261696664666C726C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254044.212:21247): pid=139983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254044.215:21248): pid=139983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254044.378:21249): pid=139983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254044.379:21250): pid=139983 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254044.383:21251): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254044.383:21252): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254044.425:21253): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254044.425:21254): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254044.493:21255): pid=140018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254044.493:21256): pid=140018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75716D6C686664706E72657179646D657667736C6B6C6C6D63696F6668767369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254044.494:21257): pid=140018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254044.496:21258): pid=140018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254044.681:21259): pid=140018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254044.682:21260): pid=140018 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254044.686:21261): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254044.686:21262): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254044.728:21263): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254044.728:21264): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254044.763:21265): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254044.763:21266): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254044.899:21267): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254044.899:21268): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254044.924:21269): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254044.925:21270): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254044.966:21271): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254044.966:21272): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254045.009:21273): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254045.009:21274): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254045.057:21275): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254045.057:21276): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254045.099:21277): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254045.099:21278): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254045.141:21279): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254045.141:21280): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254045.157:21281): pid=139420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139454 suid=74 rport=62084 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254045.158:21282): pid=139420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=139454 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254045.158:21283): pid=139420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=139420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254045.158:21284): pid=139420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254045.169:21285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254045.187:21286): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254045.187:21287): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254045.229:21288): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254045.229:21289): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254045.269:21290): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254045.270:21291): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254045.313:21292): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254045.313:21293): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254045.332:21294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254045.395:21295): pid=140216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254045.395:21296): pid=140216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254045.399:21297): pid=140216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254045.405:21298): pid=140216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254045.419:21299): pid=140219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=140219 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254045.420:21300): pid=140185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=140219 suid=74 rport=42016 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254045.420:21301): pid=140185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=140219 suid=74 rport=42016 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781254045.598:21302): pid=140216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254045.598:21303): pid=140216 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254045.604:21304): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254045.604:21305): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254045.742:21306): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254045.742:21307): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254045.782:21308): pid=140297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254045.783:21309): pid=140297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B63616E706F6661776B71727A6B6E6F71646A6A7861736D6168787A76656D63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254045.783:21310): pid=140297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254045.786:21311): pid=140297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254045.939:21312): pid=140297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254045.939:21313): pid=140297 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254045.943:21314): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254045.943:21315): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781254046.962:21316): pid=140185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="postfix" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.180:21317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.184:21318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.189:21319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.192:21320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.196:21321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.201:21322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.204:21323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.209:21324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254048.212:21325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.411:21326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.439:21327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.484:21328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.576:21329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.654:21330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.706:21331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.717:21332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.755:21333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254048.770:21334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254049.578:21335): pid=140185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140219 suid=74 rport=42016 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254049.579:21336): pid=140185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=140219 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254049.580:21337): pid=140185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=140185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254049.580:21338): pid=140185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254050.035:21339): pid=140763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=140763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254050.038:21340): pid=140746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=140763 suid=74 rport=42024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254050.038:21341): pid=140746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=140763 suid=74 rport=42024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254051.039:21342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254051.043:21343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254051.045:21344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254051.048:21345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254051.051:21346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254051.054:21347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254051.056:21348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254051.298:21349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254051.338:21350): pid=140746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="fivem" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254051.384:21351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254051.441:21352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254051.454:21353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254051.471:21354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254051.502:21355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254051.520:21356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254052.977:21357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254052.981:21358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254052.985:21359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254053.258:21360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254053.276:21361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254053.341:21362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254054.181:21363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254054.185:21364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254054.189:21365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254054.193:21366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254054.371:21367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254054.450:21368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254054.704:21369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254054.765:21370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254055.642:21371): pid=140746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140763 suid=74 rport=42024 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254055.643:21372): pid=140746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=140763 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254055.644:21373): pid=140746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=140746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254055.644:21374): pid=140746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254056.022:21375): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254056.022:21376): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254056.099:21377): pid=141601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=141601 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254056.100:21378): pid=141577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=141601 suid=74 rport=44570 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254056.100:21379): pid=141577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=141601 suid=74 rport=44570 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1781254056.105:21380): pid=141598 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254056.105:21381): pid=141598 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B787971626C776D7A6F697073657873696D7A71766A6670617871677A646C64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254056.107:21382): pid=141598 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254056.114:21383): pid=141598 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254056.304:21384): pid=141598 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254056.304:21385): pid=141598 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254056.308:21386): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254056.308:21387): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254056.765:21388): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254056.765:21389): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254056.834:21390): pid=141673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254056.835:21391): pid=141673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65727462616E75796F7A6A6E63746666616377776C6574637271737573616265203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254056.836:21392): pid=141673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254056.840:21393): pid=141673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254056.860:21394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254056.864:21395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254056.982:21396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254057.064:21397): pid=141673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254057.064:21398): pid=141673 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254057.069:21399): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254057.069:21400): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254057.131:21401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254057.167:21402): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254057.167:21403): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254057.230:21404): pid=141778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254057.230:21405): pid=141778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68777774627464637A6C677561666B6D656C7677636664656C70796671627076203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254057.230:21406): pid=141778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254057.235:21407): pid=141778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254057.268:21408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254057.323:21409): pid=141577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="la" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254057.435:21410): pid=141778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254057.435:21411): pid=141778 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254057.440:21412): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254057.440:21413): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781254057.507:21414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254057.510:21415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254057.511:21416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254057.579:21417): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254057.579:21418): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254057.599:21419): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254057.599:21420): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254057.641:21421): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254057.641:21422): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254057.648:21423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254057.670:21424): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254057.670:21425): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254057.712:21426): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254057.712:21427): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254057.752:21428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254057.758:21429): pid=141932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254057.759:21430): pid=141932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E6D7667697568647868646570776A78686579766361776D7A6F6365646467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254057.760:21431): pid=141932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254057.764:21432): pid=141932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254057.966:21433): pid=141932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254057.966:21434): pid=141932 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254057.970:21435): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254057.970:21436): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254058.011:21437): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254058.011:21438): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254058.067:21439): pid=141950 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254058.067:21440): pid=141950 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78666161756567736C676B666E676E66636C646A78716B63646B6A676A757A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254058.068:21441): pid=141950 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254058.071:21442): pid=141950 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254058.251:21443): pid=141950 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254058.251:21444): pid=141950 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254058.254:21445): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254058.254:21446): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254058.295:21447): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254058.295:21448): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254058.333:21449): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254058.333:21450): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254058.426:21451): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254058.426:21452): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254058.483:21453): pid=142003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254058.483:21454): pid=142003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6375796375656A64656A7A7161636667636662666C70766E6E75736A6E706671203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254058.484:21455): pid=142003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254058.486:21456): pid=142003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254058.644:21457): pid=142003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254058.644:21458): pid=142003 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254058.647:21459): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254058.647:21460): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254058.785:21461): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254058.785:21462): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254058.831:21463): pid=142036 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254058.832:21464): pid=142036 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75686B7268656171716B7267676D796E6869626671676667707771766D6B6A6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254058.833:21465): pid=142036 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254058.837:21466): pid=142036 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254059.172:21467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254059.175:21468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254059.177:21469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254059.287:21470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254059.362:21471): pid=142036 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254059.363:21472): pid=142036 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254059.368:21473): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254059.368:21474): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254059.408:21475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254059.539:21476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254059.569:21477): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254059.569:21478): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254059.608:21479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254059.636:21480): pid=142335 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254059.636:21481): pid=142335 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A6F756163766878766576687677657A6462706D7466636166676F66786469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254059.637:21482): pid=142335 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254059.641:21483): pid=142335 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254059.688:21484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254059.886:21485): pid=142335 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254059.886:21486): pid=142335 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254059.891:21487): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254059.891:21488): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254060.260:21489): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254060.260:21490): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254060.326:21491): pid=142385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254060.327:21492): pid=142385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686D7673716D7575696471716B786573796B776C73796663636C687577717477203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254060.328:21493): pid=142385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254060.333:21494): pid=142385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254060.490:21495): pid=141577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141601 suid=74 rport=44570 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254060.491:21496): pid=141577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=141601 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254060.492:21497): pid=141577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=141577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254060.492:21498): pid=141577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254060.525:21499): pid=142385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254060.525:21500): pid=142385 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254060.530:21501): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254060.530:21502): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254060.670:21503): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254060.670:21504): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254060.743:21505): pid=142455 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254060.744:21506): pid=142455 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69666E6B78736C7977626D7573746E756675717170786D736E6C61717A6D6B6C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254060.745:21507): pid=142455 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254060.748:21508): pid=142455 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254060.885:21509): pid=142458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=142458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254060.887:21510): pid=142433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=142458 suid=74 rport=44576 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254060.887:21511): pid=142433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=142458 suid=74 rport=44576 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781254060.979:21512): pid=142455 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254060.980:21513): pid=142455 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254060.985:21514): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254060.985:21515): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1781254061.179:21516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254061.184:21517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254061.264:21518): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254061.264:21519): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254061.339:21520): pid=142574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254061.339:21521): pid=142574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7775767A6C6969696C686B796F736B6C65797769756B656466666A646C736362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254061.341:21522): pid=142574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254061.345:21523): pid=142574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254061.370:21524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254061.438:21525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254061.531:21526): pid=142574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254061.532:21527): pid=142574 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254061.535:21528): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254061.535:21529): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254061.751:21530): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254061.751:21531): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254061.777:21532): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254061.777:21533): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254061.818:21534): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254061.818:21535): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254061.852:21536): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254061.852:21537): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254061.894:21538): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254061.894:21539): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254061.957:21540): pid=142716 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254061.957:21541): pid=142716 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A71626E6963686F6961717568646773646D636A7574756D676C6C78636A6772203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254061.958:21542): pid=142716 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254061.963:21543): pid=142716 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254062.168:21544): pid=142716 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254062.168:21545): pid=142716 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254062.173:21546): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254062.173:21547): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254062.214:21548): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254062.214:21549): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254062.282:21550): pid=142735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254062.282:21551): pid=142735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677061626F65706B6A7775636C6F6C796D716169687672707378646E696B7268203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254062.283:21552): pid=142735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254062.284:21553): pid=142735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254062.449:21554): pid=142735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254062.449:21555): pid=142735 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254062.452:21556): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254062.452:21557): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254062.494:21558): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254062.494:21559): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781254062.509:21560): pid=142433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ff" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254062.523:21561): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254062.523:21562): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254062.598:21563): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254062.598:21564): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254062.632:21565): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254062.632:21566): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254062.672:21567): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254062.672:21568): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254062.716:21569): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254062.716:21570): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254062.757:21571): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254062.757:21572): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254062.813:21573): pid=142821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254062.813:21574): pid=142821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646673766A61707775696B636F71777269616B76786E676E7269777062777663203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254062.814:21575): pid=142821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254062.816:21576): pid=142821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254063.021:21577): pid=142821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254063.021:21578): pid=142821 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254063.026:21579): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254063.026:21580): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254063.070:21581): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254063.070:21582): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254063.137:21583): pid=142839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254063.137:21584): pid=142839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7669627673747977776E6F64636970626E756277756774706C787466626F7562203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254063.138:21585): pid=142839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254063.141:21586): pid=142839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254063.325:21587): pid=142839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254063.325:21588): pid=142839 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254063.333:21589): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254063.333:21590): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254063.374:21591): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254063.374:21592): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254063.414:21593): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254063.414:21594): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254063.537:21595): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254063.537:21596): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254063.566:21597): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254063.566:21598): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254063.606:21599): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254063.607:21600): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254063.633:21601): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254063.633:21602): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254063.674:21603): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254063.675:21604): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254063.743:21605): pid=142925 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254063.743:21606): pid=142925 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6772657A7A69616564787979756A756568656E6673646273697479787A627165203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254063.745:21607): pid=142925 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254063.747:21608): pid=142925 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254063.920:21609): pid=142925 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254063.920:21610): pid=142925 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254063.924:21611): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254063.924:21612): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254063.958:21613): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254063.958:21614): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254064.017:21615): pid=142943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254064.017:21616): pid=142943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646B666D6763746B69747369666979616A75616E67626E6C7A6B6B61716F7873203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254064.017:21617): pid=142943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254064.020:21618): pid=142943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254064.038:21619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254064.173:21620): pid=142943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254064.173:21621): pid=142943 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254064.177:21622): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254064.177:21623): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254064.181:21624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254064.212:21625): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254064.212:21626): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254064.244:21627): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254064.245:21628): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254064.357:21629): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254064.357:21630): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254064.393:21631): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254064.393:21632): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254064.435:21633): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254064.435:21634): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254064.473:21635): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254064.473:21636): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254064.515:21637): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254064.515:21638): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254064.582:21639): pid=143044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254064.582:21640): pid=143044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7471766E6D6E697667676C6F7166796C696B6B676C69656A716D726F7176797A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254064.583:21641): pid=143044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254064.587:21642): pid=143044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254064.771:21643): pid=143044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254064.771:21644): pid=143044 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254064.775:21645): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254064.775:21646): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254064.818:21647): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254064.818:21648): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254064.882:21649): pid=143085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254064.882:21650): pid=143085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787761776464777875726470726B6366676C67616D62637A736E706268776D76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254064.883:21651): pid=143085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254064.886:21652): pid=143085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254065.086:21653): pid=143085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254065.086:21654): pid=143085 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254065.091:21655): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254065.091:21656): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254065.133:21657): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254065.133:21658): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254065.165:21659): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254065.166:21660): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254065.290:21661): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254065.290:21662): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254065.356:21663): pid=143115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254065.357:21664): pid=143115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766761616571796C78746F796B777364726D727861736D7A6370646970696265203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254065.357:21665): pid=143115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254065.360:21666): pid=143115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254065.547:21667): pid=142433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142458 suid=74 rport=44576 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254065.548:21668): pid=142433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=142458 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254065.549:21669): pid=142433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=142433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254065.549:21670): pid=142433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254065.930:21671): pid=143179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=143179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254065.931:21672): pid=143134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=143179 suid=74 rport=62196 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254065.932:21673): pid=143134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=143179 suid=74 rport=62196 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781254066.223:21674): prog-id=1407 op=LOAD
type=BPF msg=audit(1781254066.224:21675): prog-id=1408 op=LOAD
type=BPF msg=audit(1781254066.224:21676): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.224:21677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.232:21678): prog-id=1409 op=LOAD
type=BPF msg=audit(1781254066.232:21679): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.239:21680): prog-id=1410 op=LOAD
type=BPF msg=audit(1781254066.239:21681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.239:21682): prog-id=1411 op=LOAD
type=BPF msg=audit(1781254066.239:21683): prog-id=1412 op=LOAD
type=BPF msg=audit(1781254066.239:21684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.239:21685): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.251:21686): prog-id=1413 op=LOAD
type=BPF msg=audit(1781254066.251:21687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.251:21688): prog-id=1414 op=LOAD
type=BPF msg=audit(1781254066.251:21689): prog-id=1415 op=LOAD
type=BPF msg=audit(1781254066.252:21690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.252:21691): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254066.254:21692): prog-id=1416 op=LOAD
type=BPF msg=audit(1781254066.255:21693): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1781254066.343:21694): pid=143115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254066.343:21695): pid=143115 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254066.347:21696): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254066.348:21697): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254066.483:21698): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254066.483:21699): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254066.518:21700): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254066.518:21701): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254066.560:21702): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254066.560:21703): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254066.601:21704): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254066.601:21705): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254066.643:21706): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254066.643:21707): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254066.719:21708): pid=143243 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254066.720:21709): pid=143243 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737779717879787179736A6D68717372757A69796975617770766A6861746577203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254066.722:21710): pid=143243 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254066.728:21711): pid=143243 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254066.939:21712): pid=143243 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254066.939:21713): pid=143243 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254066.943:21714): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254066.943:21715): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254066.985:21716): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254066.985:21717): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254067.046:21718): pid=143311 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254067.046:21719): pid=143311 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62746D6862636A76626E767A78787A797A6E726666757676616C636A6F626669203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254067.047:21720): pid=143311 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254067.051:21721): pid=143311 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254067.067:21722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254067.242:21723): pid=143311 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254067.243:21724): pid=143311 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254067.247:21725): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254067.247:21726): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254067.289:21727): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254067.289:21728): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254067.317:21729): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254067.317:21730): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254067.390:21731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254067.475:21732): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254067.476:21733): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254067.507:21734): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254067.507:21735): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254067.548:21736): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254067.548:21737): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254067.584:21738): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254067.584:21739): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_AUTH msg=audit(1781254067.604:21740): pid=143134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="aoki" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254067.626:21741): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254067.626:21742): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254067.697:21743): pid=143418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254067.697:21744): pid=143418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626B6665766F6476626A7A64756D6278766F6E7A77646C6170756B6B6D676864203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254067.698:21745): pid=143418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254067.701:21746): pid=143418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254067.937:21747): pid=143418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254067.938:21748): pid=143418 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254067.944:21749): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254067.944:21750): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254067.986:21751): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254067.986:21752): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254068.051:21753): pid=143444 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254068.051:21754): pid=143444 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6968636E74696C7467686F776F6A627A6472756F73767A6E786B666679757174203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254068.052:21755): pid=143444 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254068.055:21756): pid=143444 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254068.276:21757): pid=143444 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254068.277:21758): pid=143444 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254068.281:21759): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254068.281:21760): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254068.315:21761): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254068.315:21762): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254068.348:21763): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254068.348:21764): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254068.459:21765): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254068.459:21766): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254068.527:21767): pid=143482 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254068.527:21768): pid=143482 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7365797167797377787A726E6667637264766F6F61636F736B78786169756B64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254068.528:21769): pid=143482 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254068.531:21770): pid=143482 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254068.546:21771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254068.727:21772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781254069.251:21773): prog-id=1417 op=LOAD
type=BPF msg=audit(1781254069.251:21774): prog-id=1418 op=LOAD
type=BPF msg=audit(1781254069.252:21775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.252:21776): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.261:21777): prog-id=1419 op=LOAD
type=BPF msg=audit(1781254069.261:21778): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.268:21779): prog-id=1420 op=LOAD
type=BPF msg=audit(1781254069.268:21780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.268:21781): prog-id=1421 op=LOAD
type=BPF msg=audit(1781254069.268:21782): prog-id=1422 op=LOAD
type=BPF msg=audit(1781254069.268:21783): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.268:21784): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.281:21785): prog-id=1423 op=LOAD
type=BPF msg=audit(1781254069.281:21786): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.281:21787): prog-id=1424 op=LOAD
type=BPF msg=audit(1781254069.281:21788): prog-id=1425 op=LOAD
type=BPF msg=audit(1781254069.281:21789): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.281:21790): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254069.284:21791): prog-id=1426 op=LOAD
type=BPF msg=audit(1781254069.284:21792): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781254069.380:21793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254069.396:21794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254069.396:21795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254069.438:21796): pid=143482 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254069.438:21797): pid=143482 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254069.444:21798): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254069.444:21799): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254069.582:21800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254069.809:21801): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254069.809:21802): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254069.869:21803): pid=143658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254069.869:21804): pid=143658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6376797267736174646E6A746B616E6871756A6A69757077617A737A6E756478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254069.870:21805): pid=143658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254069.874:21806): pid=143658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254069.932:21807): pid=143134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143179 suid=74 rport=62196 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254069.933:21808): pid=143134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=143179 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254069.934:21809): pid=143134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=143134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254069.934:21810): pid=143134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254070.066:21811): pid=143658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254070.066:21812): pid=143658 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254070.070:21813): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254070.070:21814): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254070.443:21815): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254070.443:21816): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254070.447:21817): pid=143673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=143673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254070.448:21818): pid=143669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=143673 suid=74 rport=62216 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254070.448:21819): pid=143669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=143673 suid=74 rport=62216 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1781254070.477:21820): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254070.477:21821): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254070.518:21822): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254070.518:21823): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254070.561:21824): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254070.561:21825): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254070.603:21826): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254070.603:21827): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254070.672:21828): pid=143726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254070.672:21829): pid=143726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A756577686C6A61796A6F786A74716B7673696E6D74747974637268686972203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254070.673:21830): pid=143726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254070.678:21831): pid=143726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254070.847:21832): pid=143726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254070.847:21833): pid=143726 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254070.851:21834): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254070.851:21835): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254070.893:21836): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254070.893:21837): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254070.927:21838): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254070.927:21839): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254070.969:21840): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254070.969:21841): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254071.004:21842): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254071.004:21843): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254071.047:21844): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254071.047:21845): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254071.096:21846): pid=143785 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254071.097:21847): pid=143785 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707668776B75796663726A6E776F746571717668656D686D766D76656D6E7566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254071.097:21848): pid=143785 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254071.100:21849): pid=143785 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254071.172:21850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254071.290:21851): pid=143785 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254071.290:21852): pid=143785 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254071.295:21853): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254071.295:21854): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254071.306:21855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254071.338:21856): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254071.338:21857): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1781254071.370:21858): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254071.370:21859): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254071.510:21860): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254071.510:21861): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254071.584:21862): pid=143837 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254071.585:21863): pid=143837 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676B6F7A7763796C6378766F687A6B78756162626D636F6D776D737564737371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254071.586:21864): pid=143837 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254071.591:21865): pid=143837 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1781254071.605:21866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254071.810:21867): pid=143837 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254071.810:21868): pid=143837 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254071.814:21869): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254071.814:21870): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1781254071.852:21871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254072.050:21872): pid=143669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="araki" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254072.120:21873): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254072.120:21874): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254072.199:21875): pid=143954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254072.199:21876): pid=143954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74666668627A657075736267716678647669646D716965646B7A6E7762616C73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254072.201:21877): pid=143954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254072.205:21878): pid=143954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254072.398:21879): pid=143954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254072.398:21880): pid=143954 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254072.401:21881): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254072.401:21882): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1781254072.508:21883): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1781254072.508:21884): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1781254072.575:21885): pid=144019 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1781254072.576:21886): pid=144019 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68726D7266736B6671716D627478656A6F647763616679616166756F75657362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1781254072.577:21887): pid=144019 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1781254072.579:21888): pid=144019 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254072.761:21889): pid=144019 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1781254072.761:21890): pid=144019 uid=1002 auid=1002 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1781254072.765:21891): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1781254072.765:21892): pid=26409 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1781254074.762:21893): pid=144208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254075.016:21894): pid=144207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=144208 suid=74 rport=39542 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254075.017:21895): pid=144207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=144208 suid=74 rport=39542 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254075.245:21896): pid=143669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143673 suid=74 rport=62216 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254075.245:21897): pid=143669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=143673 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254075.247:21898): pid=143669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=143669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254075.247:21899): pid=143669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254075.522:21900): pid=144275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254075.523:21901): pid=144274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=144275 suid=74 rport=35522 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254075.523:21902): pid=144274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=144275 suid=74 rport=35522 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254076.175:21903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254076.178:21904): pid=144207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=203.175.125.130 addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254076.332:21905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254076.964:21906): pid=144274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="llvm" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.179:21907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.183:21908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.187:21909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.191:21910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.194:21911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.199:21912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.203:21913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.207:21914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254079.211:21915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.396:21916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.485:21917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.527:21918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.532:21919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.579:21920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.601:21921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.619:21922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.626:21923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254079.713:21924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254080.060:21925): pid=144207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144208 suid=74 rport=39542 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254080.060:21926): pid=144207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144208 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254080.062:21927): pid=144207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254080.062:21928): pid=144207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=203.175.125.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254080.729:21929): pid=144723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254080.848:21930): pid=144722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=144723 suid=74 rport=60802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254080.848:21931): pid=144722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=144723 suid=74 rport=60802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254081.452:21932): pid=144722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254081.629:21933): pid=144274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144275 suid=74 rport=35522 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254081.629:21934): pid=144274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144275 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254081.631:21935): pid=144274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254081.631:21936): pid=144274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254081.658:21937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254081.662:21938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254081.666:21939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254081.669:21940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254081.673:21941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254081.677:21942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254081.683:21943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254081.871:21944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254081.881:21945): pid=144942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254081.882:21946): pid=144807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=144942 suid=74 rport=37890 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254081.882:21947): pid=144807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=144942 suid=74 rport=37890 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254081.999:21948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254082.028:21949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254082.040:21950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254082.051:21951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254082.080:21952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254082.108:21953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254083.373:21954): pid=144722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144723 suid=74 rport=60802 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254083.373:21955): pid=144722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144723 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254083.375:21956): pid=144722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254083.375:21957): pid=144722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254083.387:21958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254083.390:21959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254083.394:21960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254083.399:21961): pid=144807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="b" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254083.548:21962): pid=145078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254083.656:21963): pid=145068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=145078 suid=74 rport=58590 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254083.657:21964): pid=145068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=145078 suid=74 rport=58590 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254083.680:21965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254083.706:21966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254083.803:21967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254084.053:21968): pid=145068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="solana" exe="/usr/sbin/sshd" hostname=45.148.10.183 addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254084.479:21969): pid=145141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254084.602:21970): pid=145140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=145141 suid=74 rport=53358 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254084.602:21971): pid=145140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=145141 suid=74 rport=53358 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254085.179:21972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254085.184:21973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254085.189:21974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254085.193:21975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254085.215:21976): pid=145140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="debian1" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254085.471:21977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254085.621:21978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254085.669:21979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254085.736:21980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254086.080:21981): pid=144807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144942 suid=74 rport=37890 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254086.081:21982): pid=144807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144942 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254086.083:21983): pid=144807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=144807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254086.083:21984): pid=144807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254086.525:21985): pid=145292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254086.526:21986): pid=145275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=145292 suid=74 rport=37900 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254086.526:21987): pid=145275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=145292 suid=74 rport=37900 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254087.170:21988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254087.289:21989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254087.347:21990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254087.635:21991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254087.638:21992): pid=145275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="king" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254087.709:21993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254087.717:21994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254087.811:21995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254087.882:21996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254087.993:21997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254088.274:21998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254088.345:21999): pid=145068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145078 suid=74 rport=58590 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254088.346:22000): pid=145068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145078 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254088.347:22001): pid=145068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254088.347:22002): pid=145068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254089.117:22003): pid=145140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145141 suid=74 rport=53358 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254089.117:22004): pid=145140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145141 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254089.118:22005): pid=145140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254089.118:22006): pid=145140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254090.175:22007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254090.180:22008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254090.183:22009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254090.187:22010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254090.360:22011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254090.499:22012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254090.506:22013): pid=145275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145292 suid=74 rport=37900 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254090.507:22014): pid=145275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145292 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254090.508:22015): pid=145275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254090.508:22016): pid=145275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254090.549:22017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254090.643:22018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254090.956:22019): pid=145878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254090.958:22020): pid=145873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=145878 suid=74 rport=37904 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254090.958:22021): pid=145873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=145878 suid=74 rport=37904 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254092.103:22022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254092.107:22023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254092.330:22024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254092.411:22025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254092.421:22026): pid=145873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="liferay" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254095.104:22027): pid=145873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145878 suid=74 rport=37904 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254095.105:22028): pid=145873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145878 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254095.107:22029): pid=145873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=145873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254095.107:22030): pid=145873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254095.128:22031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254095.287:22032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254095.548:22033): pid=146113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=146113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254095.549:22034): pid=146087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=146113 suid=74 rport=40658 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254095.550:22035): pid=146087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=146113 suid=74 rport=40658 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254097.419:22036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254097.421:22037): pid=146087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="kettle" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254097.799:22038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254099.181:22039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254099.320:22040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254100.176:22041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254100.343:22042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254102.046:22043): pid=146087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146113 suid=74 rport=40658 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254102.047:22044): pid=146087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=146113 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254102.049:22045): pid=146087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=146087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254102.049:22046): pid=146087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254102.068:22047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254102.070:22048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254102.252:22049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254102.337:22050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254102.523:22051): pid=146609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=146609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254102.525:22052): pid=146576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=146609 suid=74 rport=33724 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254102.526:22053): pid=146576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=146609 suid=74 rport=33724 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254104.190:22054): pid=146576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ant" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781254105.919:22055): prog-id=1427 op=LOAD
type=SYSCALL msg=audit(1781254105.919:22055): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd2a3b61c0 a2=90 a3=9500000001 items=0 ppid=147006 pid=147007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254105.919:22055): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373331353939386164303666303431613133373061323966623262393236
type=USER_ACCT msg=audit(1781254105.969:22056): pid=147012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1781254105.969:22057): pid=147012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1781254105.970:22058): pid=147012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254106.002:22059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254106.022:22060): pid=147033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1781254106.022:22061): pid=147033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1781254106.022:22062): pid=147033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781254106.023:22063): pid=147033 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1781254106.023:22063): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffc03640a30 a2=1 a3=0 items=0 ppid=1 pid=147033 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254106.023:22063): proctitle="(systemd)"
type=USER_START msg=audit(1781254106.024:22064): pid=147033 uid=0 auid=0 ses=20 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1781254106.041:22065): prog-id=1428 op=LOAD
type=SYSCALL msg=audit(1781254106.041:22065): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff301f8090 a2=90 a3=0 items=0 ppid=1 pid=147033 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254106.041:22065): proctitle="(systemd)"
type=BPF msg=audit(1781254106.041:22066): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.041:22067): prog-id=1429 op=LOAD
type=SYSCALL msg=audit(1781254106.041:22067): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff301f8130 a2=90 a3=4 items=0 ppid=1 pid=147033 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254106.041:22067): proctitle="(systemd)"
type=BPF msg=audit(1781254106.042:22068): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1781254106.371:22069): pid=146576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146609 suid=74 rport=33724 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254106.372:22070): pid=146576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=146609 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254106.374:22071): pid=146576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=146576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254106.374:22072): pid=146576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1781254106.554:22073): prog-id=1430 op=LOAD
type=BPF msg=audit(1781254106.554:22074): prog-id=1431 op=LOAD
type=BPF msg=audit(1781254106.554:22075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.554:22076): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.563:22077): prog-id=1432 op=LOAD
type=BPF msg=audit(1781254106.563:22078): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.570:22079): prog-id=1433 op=LOAD
type=BPF msg=audit(1781254106.570:22080): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.570:22081): prog-id=1434 op=LOAD
type=BPF msg=audit(1781254106.570:22082): prog-id=1435 op=LOAD
type=BPF msg=audit(1781254106.570:22083): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.570:22084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.583:22085): prog-id=1436 op=LOAD
type=BPF msg=audit(1781254106.583:22086): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.583:22087): prog-id=1437 op=LOAD
type=BPF msg=audit(1781254106.583:22088): prog-id=1438 op=LOAD
type=BPF msg=audit(1781254106.583:22089): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.583:22090): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254106.586:22091): prog-id=1439 op=LOAD
type=BPF msg=audit(1781254106.586:22092): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781254106.605:22093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254106.636:22094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781254106.679:22095): pid=147012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254106.765:22096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254106.765:22097): pid=147012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781254106.766:22098): pid=147012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254106.828:22099): pid=147287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=147287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254106.829:22100): pid=147098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=147287 suid=74 rport=33728 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254106.829:22101): pid=147098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=147287 suid=74 rport=33728 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254108.812:22102): pid=147098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="miki" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.176:22103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.180:22104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.184:22105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.188:22106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.193:22107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.199:22108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.207:22109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.210:22110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254110.212:22111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.440:22112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.447:22113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.496:22114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.561:22115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.574:22116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.591:22117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.699:22118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.744:22119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254110.770:22120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254112.177:22121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254112.181:22122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254112.186:22123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254112.191:22124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254112.197:22125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254112.203:22126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254112.210:22127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254112.418:22128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254112.564:22129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254112.571:22130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254112.653:22131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254112.703:22132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254112.738:22133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254112.782:22134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254112.842:22135): pid=147098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=147287 suid=74 rport=33728 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254112.843:22136): pid=147098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=147287 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254112.844:22137): pid=147098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=147098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254112.844:22138): pid=147098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254113.353:22139): pid=148144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254113.355:22140): pid=148062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=148144 suid=74 rport=19212 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254113.355:22141): pid=148062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=148144 suid=74 rport=19212 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254113.824:22142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254113.830:22143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254113.837:22144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254114.041:22145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254114.163:22146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254114.186:22147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254115.073:22148): pid=148062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jackie" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254116.129:22149): pid=148365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1781254116.172:22150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254116.176:22151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254116.181:22152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254116.185:22153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254116.340:22154): pid=148360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=148365 suid=74 rport=56746 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254116.340:22155): pid=148360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=148365 suid=74 rport=56746 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254116.421:22156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254116.551:22157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254116.721:22158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254116.777:22159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1781254116.794:22160): pid=147038 uid=0 auid=0 ses=20 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1781254116.795:22161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254116.821:22162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254117.112:22163): pid=148062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148144 suid=74 rport=19212 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254117.112:22164): pid=148062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148144 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254117.113:22165): pid=148062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254117.113:22166): pid=148062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254117.293:22167): pid=148360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="fastuser" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254117.467:22168): pid=148604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148604 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254117.469:22169): pid=148595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=148604 suid=74 rport=19242 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254117.469:22170): pid=148595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=148604 suid=74 rport=19242 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254118.172:22171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254118.175:22172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254118.178:22173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254118.181:22174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254118.295:22175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254118.325:22176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254118.501:22177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254118.511:22178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254118.567:22179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254118.903:22180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254119.107:22181): pid=148595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="maha" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254119.692:22182): pid=148360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148365 suid=74 rport=56746 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254119.692:22183): pid=148360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148365 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254119.696:22184): pid=148360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254119.696:22185): pid=148360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254121.123:22186): pid=148975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1781254121.174:22187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254121.177:22188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254121.181:22189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254121.185:22190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254121.220:22191): pid=148974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=148975 suid=74 rport=52124 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254121.220:22192): pid=148974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=148975 suid=74 rport=52124 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254121.407:22193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254121.518:22194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254121.542:22195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254121.599:22196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254121.714:22197): pid=148974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="dockeruser" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254122.526:22198): pid=148595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148604 suid=74 rport=19242 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254122.526:22199): pid=148595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148604 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254122.528:22200): pid=148595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148595 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254122.528:22201): pid=148595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254122.543:22202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254122.547:22203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254122.714:22204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254122.764:22205): pid=149214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254122.766:22206): pid=149199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=149214 suid=74 rport=24496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254122.766:22207): pid=149199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=149214 suid=74 rport=24496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254122.874:22208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254123.969:22209): pid=149199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="cmspuser" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254126.141:22210): pid=148974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148975 suid=74 rport=52124 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254126.142:22211): pid=148974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148975 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254126.143:22212): pid=148974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=148974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254126.143:22213): pid=148974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254126.161:22214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254126.334:22215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254127.387:22216): pid=149199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149214 suid=74 rport=24496 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254127.387:22217): pid=149199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149214 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254127.389:22218): pid=149199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254127.389:22219): pid=149199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254127.770:22220): pid=149408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254127.771:22221): pid=149399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=149408 suid=74 rport=24504 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254127.771:22222): pid=149399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=149408 suid=74 rport=24504 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254128.180:22223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254128.547:22224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254129.181:22225): pid=149399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="cataleya" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254130.177:22226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254130.321:22227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254131.179:22228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254131.368:22229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254131.560:22230): pid=149399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149408 suid=74 rport=24504 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254131.561:22231): pid=149399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149408 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254131.562:22232): pid=149399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254131.562:22233): pid=149399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254132.027:22234): pid=149679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254132.028:22235): pid=149673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=149679 suid=74 rport=29676 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254132.028:22236): pid=149673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=149679 suid=74 rport=29676 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254133.172:22237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254133.176:22238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254133.301:22239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254133.450:22240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254133.596:22241): pid=149673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="dockeruser" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254137.169:22242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254137.329:22243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254138.391:22244): pid=149673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=149679 suid=74 rport=29676 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254138.392:22245): pid=149673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149679 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254138.393:22246): pid=149673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=149673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254138.393:22247): pid=149673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254138.848:22248): pid=150192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254138.849:22249): pid=150174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=150192 suid=74 rport=29704 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254138.849:22250): pid=150174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=150192 suid=74 rport=29704 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254140.515:22251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.520:22252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.526:22253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254140.533:22254): pid=150174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="professor" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.643:22255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.646:22256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.649:22257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.712:22258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254140.747:22259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.764:22260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254140.824:22261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254140.844:22262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254140.882:22263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254140.908:22264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254140.929:22265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254140.995:22266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254141.034:22267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254141.055:22268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254141.192:22269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254143.127:22270): pid=150174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=150192 suid=74 rport=29704 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254143.128:22271): pid=150174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150192 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254143.130:22272): pid=150174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254143.130:22273): pid=150174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254143.158:22274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254143.163:22275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254143.167:22276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254143.171:22277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254143.176:22278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254143.182:22279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254143.188:22280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254143.367:22281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254143.405:22282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254143.455:22283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254143.496:22284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254143.552:22285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254143.610:22286): pid=150776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254143.611:22287): pid=150655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=150776 suid=74 rport=40564 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254143.611:22288): pid=150655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=150776 suid=74 rport=40564 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254143.635:22289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254143.793:22290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254143.913:22291): pid=150793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254144.146:22292): pid=150792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=150793 suid=74 rport=39140 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.103.118.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254144.146:22293): pid=150792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=150793 suid=74 rport=39140 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.103.118.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254144.173:22294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254144.179:22295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254144.297:22296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254144.436:22297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254144.568:22298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254144.577:22299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254145.204:22300): pid=150792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=14.103.118.194 addr=14.103.118.194 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254145.309:22301): pid=150655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="osman" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254147.177:22302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254147.182:22303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254147.186:22304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254147.189:22305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254147.412:22306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254147.520:22307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254147.540:22308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254147.774:22309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254148.516:22310): pid=150655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=150776 suid=74 rport=40564 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254148.517:22311): pid=150655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150776 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254148.518:22312): pid=150655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254148.518:22313): pid=150655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254148.534:22314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254148.540:22315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254148.545:22316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254148.663:22317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254148.782:22318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254148.835:22319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254148.905:22320): pid=151329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254148.908:22321): pid=151280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=151329 suid=74 rport=40578 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254148.910:22322): pid=151280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=151329 suid=74 rport=40578 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254148.955:22323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254149.071:22324): pid=150792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=150793 suid=74 rport=39140 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.103.118.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254149.072:22325): pid=150792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150793 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254149.073:22326): pid=150792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=150792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254149.073:22327): pid=150792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=14.103.118.194 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254149.085:22328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254149.178:22329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254149.466:22330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254150.777:22331): pid=151280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="dvd" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254152.180:22332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254152.183:22333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254152.185:22334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254152.188:22335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254152.473:22336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254152.491:22337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254152.515:22338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254152.613:22339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254153.181:22340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254153.188:22341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254153.369:22342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254153.399:22343): pid=151280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=151329 suid=74 rport=40578 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254153.400:22344): pid=151280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151329 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254153.401:22345): pid=151280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254153.401:22346): pid=151280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254153.520:22347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254153.720:22348): pid=151857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151857 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254153.721:22349): pid=151856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=151857 suid=74 rport=26198 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254153.721:22350): pid=151856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=151857 suid=74 rport=26198 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254155.354:22351): pid=151856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ant" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254156.989:22352): pid=151931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1781254157.009:22353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254157.190:22354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254157.207:22355): pid=151930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=151931 suid=74 rport=41794 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254157.208:22356): pid=151930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=151931 suid=74 rport=41794 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254159.178:22357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254159.350:22358): pid=151856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=151857 suid=74 rport=26198 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254159.350:22359): pid=151856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151857 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254159.352:22360): pid=151856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254159.352:22361): pid=151856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254159.517:22362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254159.647:22363): pid=152100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254159.649:22364): pid=152099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=152100 suid=74 rport=26212 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254159.649:22365): pid=152099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=152100 suid=74 rport=26212 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254160.751:22366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254160.900:22367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254161.277:22368): pid=152099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="min" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254162.027:22369): pid=152270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254162.059:22370): pid=152267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=152270 suid=74 rport=37298 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254162.059:22371): pid=152267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=152270 suid=74 rport=37298 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254162.171:22372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254162.303:22373): pid=152267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="teamspeak" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254162.348:22374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254163.851:22375): pid=152099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152100 suid=74 rport=26212 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254163.851:22376): pid=152099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152100 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254163.852:22377): pid=152099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254163.852:22378): pid=152099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254163.872:22379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254163.876:22380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254164.052:22381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254164.084:22382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254164.111:22383): pid=152553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254164.112:22384): pid=152486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=152553 suid=74 rport=63978 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254164.112:22385): pid=152486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=152553 suid=74 rport=63978 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254165.347:22386): pid=152486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gillibert" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254165.519:22387): pid=152267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152270 suid=74 rport=37298 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254165.519:22388): pid=152267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152270 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254165.520:22389): pid=152267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254165.520:22390): pid=152267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254167.358:22391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254167.508:22392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254167.821:22393): pid=151930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=151931 suid=74 rport=41794 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254167.822:22394): pid=151930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151931 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254167.823:22395): pid=151930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=151930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254167.823:22396): pid=151930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254168.761:22397): pid=152781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254168.965:22398): pid=152780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=152781 suid=74 rport=50706 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254168.966:22399): pid=152780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=152781 suid=74 rport=50706 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254169.183:22400): pid=152486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152553 suid=74 rport=63978 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254169.183:22401): pid=152486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152553 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254169.185:22402): pid=152486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254169.185:22403): pid=152486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254169.460:22404): pid=152794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152794 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254169.461:22405): pid=152785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=152794 suid=74 rport=63988 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254169.461:22406): pid=152785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=152794 suid=74 rport=63988 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254169.728:22407): pid=152812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254169.862:22408): pid=152811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=152812 suid=74 rport=35950 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254169.862:22409): pid=152811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=152812 suid=74 rport=35950 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254169.912:22410): pid=152780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254170.430:22411): pid=152785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="joomla" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254170.511:22412): pid=152811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="adrian" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.183:22413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.187:22414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.192:22415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.196:22416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.202:22417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.207:22418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.242:22419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.245:22420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254171.251:22421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.413:22422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.515:22423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.577:22424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.604:22425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.627:22426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.639:22427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.649:22428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.685:22429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254171.693:22430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254171.916:22431): pid=152780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152781 suid=74 rport=50706 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254171.916:22432): pid=152780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152781 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254171.918:22433): pid=152780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254171.918:22434): pid=152780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254173.222:22435): pid=152785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152794 suid=74 rport=63988 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254173.224:22436): pid=152785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152794 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254173.225:22437): pid=152785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254173.225:22438): pid=152785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254173.402:22439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254173.404:22440): pid=152811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=152812 suid=74 rport=35950 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254173.404:22441): pid=152811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152812 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254173.405:22442): pid=152811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=152811 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254173.405:22443): pid=152811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254173.412:22444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254173.509:22445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254173.514:22446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254173.596:22447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254173.600:22448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254173.639:22449): pid=153410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=153410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254173.643:22450): pid=153274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=153410 suid=74 rport=49868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254173.643:22451): pid=153274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=153410 suid=74 rport=49868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254173.657:22452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254173.715:22453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254173.728:22454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254173.865:22455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254173.876:22456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254173.880:22457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254173.929:22458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254174.207:22459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254175.170:22460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254175.174:22461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254175.178:22462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254175.365:22463): pid=153274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="adm" exe="/usr/sbin/sshd" hostname=213.209.159.158 addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254175.484:22464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254175.498:22465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254175.521:22466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254177.523:22467): pid=153274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=153410 suid=74 rport=49868 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254177.524:22468): pid=153274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=153410 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254177.525:22469): pid=153274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=153274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254177.525:22470): pid=153274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="adm" exe="/usr/sbin/sshd" hostname=? addr=213.209.159.158 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254177.550:22471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254177.555:22472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254177.563:22473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254177.802:22474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254177.807:22475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254177.902:22476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254177.929:22477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254178.272:22478): pid=154010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781254178.297:22479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254178.397:22480): pid=154009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=154010 suid=74 rport=43008 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254178.398:22481): pid=154009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=154010 suid=74 rport=43008 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254179.015:22482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254179.020:22483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254179.026:22484): pid=154009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="steam" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254179.109:22485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254179.168:22486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254179.223:22487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254179.272:22488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254179.327:22489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254179.532:22490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254179.537:22491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254179.609:22492): pid=154205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254179.610:22493): pid=154201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=154205 suid=74 rport=58276 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254179.614:22494): pid=154201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=154205 suid=74 rport=58276 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254179.663:22495): pid=154201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254179.663:22496): pid=154201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254179.686:22497): pid=154201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254179.686:22498): pid=154201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=154205 suid=74 rport=58276 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781254179.688:22499): pid=154201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781254179.689:22500): pid=154201 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781254179.689:22500): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd583e1290 a2=4 a3=3e8 items=0 ppid=38621 pid=154201 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254179.689:22500): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781254179.691:22501): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1781254179.747:22502): pid=154232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1781254179.747:22503): pid=154232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1781254179.748:22504): pid=154232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781254179.749:22505): pid=154232 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781254179.749:22505): arch=c000003e syscall=1 success=yes exit=4 a0=9 a1=7ffc03640a30 a2=4 a3=3e8 items=0 ppid=1 pid=154232 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254179.749:22505): proctitle="(systemd)"
type=USER_START msg=audit(1781254179.754:22506): pid=154232 uid=0 auid=1000 ses=22 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781254179.996:22507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781254180.014:22508): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.015:22509): pid=154266 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1781254180.018:22510): pid=154266 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_STOP msg=audit(1781254180.053:22511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254180.063:22512): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254180.063:22513): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.065:22514): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254180.109:22515): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254180.109:22516): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254180.129:22517): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254180.129:22518): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.130:22519): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254180.172:22520): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254180.172:22521): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254180.188:22522): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254180.188:22523): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.190:22524): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154340 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254180.232:22525): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254180.232:22526): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254180.251:22527): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254180.251:22528): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.252:22529): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254180.388:22530): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254180.388:22531): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254180.409:22532): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254180.409:22533): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.411:22534): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254180.548:22535): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254180.548:22536): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254180.561:22537): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254180.561:22538): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.562:22539): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254180.605:22540): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254180.605:22541): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254180.617:22542): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254180.617:22543): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254180.619:22544): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254180.698:22545): pid=154417 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254180.698:22546): pid=154417 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A79696B68706A61696B66786D6A636776706F71646D747065667263726E6F64203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738313235343138302E3131313836352D34313932362D3231333736353234303831343035322F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254180.699:22547): pid=154417 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254180.704:22548): pid=154417 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254182.521:22549): pid=154009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=154010 suid=74 rport=43008 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254182.522:22550): pid=154009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154010 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254182.523:22551): pid=154009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254182.523:22552): pid=154009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254182.548:22553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254182.551:22554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254182.553:22555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254182.633:22556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254182.809:22557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254182.839:22558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254182.884:22559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254182.935:22560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254183.425:22561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254183.571:22562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254183.595:22563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254183.597:22564): pid=154417 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781254183.598:22565): pid=154417 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781254183.603:22566): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254183.603:22567): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254183.653:22568): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254183.653:22569): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254183.655:22570): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254183.697:22571): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254183.697:22572): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1781254183.780:22573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254187.346:22574): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254187.346:22575): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254187.347:22576): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254187.390:22577): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254187.390:22578): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254187.406:22579): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254187.406:22580): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254187.408:22581): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254187.451:22582): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254187.451:22583): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254187.607:22584): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254187.608:22585): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254187.609:22586): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155006 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1781254188.173:22587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254188.262:22588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254188.355:22589): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254188.355:22590): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254190.156:22591): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254190.156:22592): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254190.158:22593): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155108 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1781254190.168:22594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254190.200:22595): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254190.200:22596): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254190.221:22597): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254190.221:22598): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254190.223:22599): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155176 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254190.266:22600): pid=155196 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254190.267:22601): pid=155196 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687167756E6161706A6668776D6D74626C7A6A6B746B6F78696377787A616979203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738313235343138372E333933363730332D34323031382D3235393434313232323136353036302F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254190.268:22602): pid=155196 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254190.271:22603): pid=155196 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1781254190.429:22604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254191.183:22605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254191.319:22606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254193.177:22607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254193.282:22608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254193.969:22609): pid=155196 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781254193.969:22610): pid=155196 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781254193.975:22611): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254193.975:22612): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254193.989:22613): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254193.989:22614): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254193.990:22615): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254194.033:22616): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254194.034:22617): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1781254194.173:22618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254194.178:22619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254194.370:22620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254194.418:22621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254197.563:22622): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254197.563:22623): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254197.566:22624): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254197.609:22625): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254197.609:22626): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254197.620:22627): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254197.620:22628): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254197.622:22629): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254197.664:22630): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254197.664:22631): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254197.770:22632): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254197.770:22633): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254197.772:22634): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155912 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254197.860:22635): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254197.860:22636): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254197.875:22637): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254197.875:22638): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254197.877:22639): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155932 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254197.920:22640): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254197.920:22641): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254197.936:22642): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254197.936:22643): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254197.939:22644): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=155946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254198.001:22645): pid=155961 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254198.002:22646): pid=155961 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A616F66716E7A72707A6879747864627074726867776F687262716D716B6A203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738313235343139372E363131373737332D34323037322D3135303432343238353738323833322F416E736962616C6C5A5F69707461626C65732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254198.003:22647): pid=155961 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254198.009:22648): pid=155961 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781254198.022:22649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254198.185:22650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1781254198.266:22651): table=filter:5 family=2 entries=1 op=nft_register_rule pid=155990 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1781254198.266:22651): arch=c000003e syscall=46 success=yes exit=768 a0=3 a1=7ffdc7782860 a2=0 a3=7ffdc778284c items=0 ppid=155964 pid=155990 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=21 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254198.266:22651): proctitle=2F7362696E2F69707461626C6573002D740066696C746572002D4900494E505554002D7000746370002D730033382E3130322E38332E3332002D6A00414343455054002D690065746830002D6D00636F6D6D656E74002D2D636F6D6D656E7400616C6C6F77207373682061636365737320666F72207A75756C20657865637574
type=USER_END msg=audit(1781254198.287:22652): pid=155961 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781254198.288:22653): pid=155961 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781254198.294:22654): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254198.294:22655): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1781254199.367:22656): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254199.367:22657): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254199.368:22658): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=156027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254199.411:22659): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254199.411:22660): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1781254202.176:22661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.179:22662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.183:22663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.188:22664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.193:22665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.196:22666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.199:22667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.202:22668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254202.205:22669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.330:22670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.422:22671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.461:22672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.509:22673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.532:22674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.555:22675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.568:22676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.616:22677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254202.703:22678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254204.177:22679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254204.181:22680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254204.185:22681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254204.189:22682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254204.194:22683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254204.198:22684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254204.304:22685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254204.380:22686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254204.424:22687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254204.494:22688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254204.502:22689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254204.509:22690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254204.645:22691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254204.724:22692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254206.177:22693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254206.181:22694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254206.184:22695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254206.378:22696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254206.443:22697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254206.663:22698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254208.179:22699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254208.185:22700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254208.190:22701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254208.324:22702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254208.338:22703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254208.435:22704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254208.473:22705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254208.821:22706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254209.275:22707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254209.279:22708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254209.398:22709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254209.464:22710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254209.503:22711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254209.634:22712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254209.638:22713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254210.004:22714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254210.180:22715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254210.750:22716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254213.182:22717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254213.187:22718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254213.192:22719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254213.198:22720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254213.591:22721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254213.600:22722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254213.608:22723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254213.620:22724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254213.642:22725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254213.737:22726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254214.170:22727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254214.175:22728): pid=157623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=157623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254214.325:22729): pid=157621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=157623 suid=74 rport=55184 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254214.325:22730): pid=157621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=157623 suid=74 rport=55184 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254214.382:22731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254214.685:22732): pid=157621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="solana" exe="/usr/sbin/sshd" hostname=45.148.10.183 addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254216.875:22733): pid=157621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=157623 suid=74 rport=55184 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254216.876:22734): pid=157621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=157623 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254216.877:22735): pid=157621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=157621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254216.877:22736): pid=157621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254219.174:22737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254219.306:22738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254220.512:22739): pid=157962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=157962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254220.748:22740): pid=157961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=157962 suid=74 rport=56210 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254220.748:22741): pid=157961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=157962 suid=74 rport=56210 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254221.168:22742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254221.472:22743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254221.476:22744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254221.582:22745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254221.799:22746): pid=157961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254224.171:22747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254224.318:22748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254225.176:22749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254225.182:22750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254225.411:22751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254225.495:22752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254225.674:22753): pid=157961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=157962 suid=74 rport=56210 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254225.675:22754): pid=157961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=157962 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254225.676:22755): pid=157961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=157961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254225.676:22756): pid=157961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254229.173:22757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254229.320:22758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.182:22759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.187:22760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.192:22761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.196:22762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.201:22763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.205:22764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.215:22765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.220:22766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254233.224:22767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.484:22768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.492:22769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.638:22770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.657:22771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.728:22772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.764:22773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.776:22774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.797:22775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254233.834:22776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254235.181:22777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254235.186:22778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254235.191:22779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254235.195:22780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254235.199:22781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254235.204:22782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254235.210:22783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254235.432:22784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254235.459:22785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254235.481:22786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254235.491:22787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254235.557:22788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254235.587:22789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254235.636:22790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254237.171:22791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254237.174:22792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254237.176:22793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254237.359:22794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254237.450:22795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254237.665:22796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254239.178:22797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254239.182:22798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254239.186:22799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254239.190:22800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254239.396:22801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254239.455:22802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254239.576:22803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254239.579:22804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254239.837:22805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254240.176:22806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254240.482:22807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254240.543:22808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254241.825:22809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254243.474:22810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254243.526:22811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254243.624:22812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254243.643:22813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254243.647:22814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254243.650:22815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254243.652:22816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254243.657:22817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254243.842:22818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254244.049:22819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254244.069:22820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254244.086:22821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254244.134:22822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254244.141:22823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254244.199:22824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254244.420:22825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254244.638:22826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254248.626:22827): pid=160472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254248.628:22828): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=160472 suid=74 rport=49660 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254248.628:22829): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=160472 suid=74 rport=49660 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254248.860:22830): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254248.960:22831): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254248.988:22832): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254248.988:22833): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254249.020:22834): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254249.022:22835): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=160472 suid=74 rport=49660 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781254249.024:22836): pid=160471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781254249.024:22837): pid=160471 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781254249.024:22837): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc42f17700 a2=4 a3=3e8 items=0 ppid=38621 pid=160471 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254249.024:22837): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781254249.026:22838): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781254249.070:22839): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254249.071:22840): pid=160493 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1781254249.073:22841): pid=160493 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781254249.117:22842): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254249.117:22843): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254249.119:22844): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160502 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254249.196:22845): pid=160521 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254249.196:22846): pid=160521 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A61766274796F706C7A737779777572746A6869786E667479677A6272647375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254249.198:22847): pid=160521 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254249.203:22848): pid=160521 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781254250.175:22849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254250.334:22850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254252.172:22851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254252.176:22852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254252.331:22853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254252.599:22854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254253.892:22855): pid=160990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254254.010:22856): pid=160989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=160990 suid=74 rport=39332 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254254.010:22857): pid=160989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=160990 suid=74 rport=39332 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1781254254.283:22858): prog-id=1440 op=LOAD
type=BPF msg=audit(1781254254.283:22859): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.283:22860): prog-id=1441 op=LOAD
type=BPF msg=audit(1781254254.283:22861): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.597:22862): prog-id=1442 op=LOAD
type=BPF msg=audit(1781254254.598:22863): prog-id=1443 op=LOAD
type=BPF msg=audit(1781254254.598:22864): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.598:22865): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.607:22866): prog-id=1444 op=LOAD
type=BPF msg=audit(1781254254.607:22867): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.614:22868): prog-id=1445 op=LOAD
type=BPF msg=audit(1781254254.614:22869): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.614:22870): prog-id=1446 op=LOAD
type=BPF msg=audit(1781254254.614:22871): prog-id=1447 op=LOAD
type=BPF msg=audit(1781254254.614:22872): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.614:22873): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.627:22874): prog-id=1448 op=LOAD
type=BPF msg=audit(1781254254.627:22875): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.627:22876): prog-id=1449 op=LOAD
type=BPF msg=audit(1781254254.627:22877): prog-id=1450 op=LOAD
type=BPF msg=audit(1781254254.627:22878): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.627:22879): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254254.630:22880): prog-id=1451 op=LOAD
type=BPF msg=audit(1781254254.630:22881): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781254254.687:22882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254254.690:22883): pid=160989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="alicia" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254254.793:22884): pid=161078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=161078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781254254.857:22885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254254.886:22886): pid=161072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=161078 suid=74 rport=34678 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254254.887:22887): pid=161072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=161078 suid=74 rport=34678 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254255.384:22888): pid=161072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="dzq" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254256.170:22889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254256.175:22890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254256.349:22891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254256.386:22892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254257.643:22893): pid=160989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=160990 suid=74 rport=39332 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254257.644:22894): pid=160989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160990 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254257.645:22895): pid=160989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254257.645:22896): pid=160989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254258.998:22897): pid=161072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=161078 suid=74 rport=34678 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254258.999:22898): pid=161072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=161078 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254259.003:22899): pid=161072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=161072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254259.003:22900): pid=161072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254261.086:22901): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=154266 suid=1000 rport=58276 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254261.086:22902): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254261.090:22903): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781254261.090:22904): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254261.091:22905): pid=154201 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=154201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1781254261.094:22906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254261.206:22907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.177:22908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.181:22909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.186:22910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.190:22911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.195:22912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.199:22913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.205:22914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.209:22915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254264.214:22916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.469:22917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.487:22918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.532:22919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.545:22920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.568:22921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.671:22922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.678:22923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.773:22924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254264.802:22925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=MAC_POLICY_LOAD msg=audit(1781254265.625:22926): auid=1000 ses=23 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1781254265.625:22926): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f2d21a00000 a2=36aa51 a3=0 items=0 ppid=160991 pid=161859 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254265.625:22926): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1781254265.760:22927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254265.762:22928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254265.765:22929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254265.767:22930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254265.769:22931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254265.772:22932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254265.775:22933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254265.961:22934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254266.078:22935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254266.117:22936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254266.139:22937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254266.248:22938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254266.263:22939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254266.273:22940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781254266.676:22941): prog-id=1452 op=LOAD
type=BPF msg=audit(1781254266.677:22942): prog-id=1453 op=LOAD
type=BPF msg=audit(1781254266.677:22943): prog-id=1454 op=LOAD
type=BPF msg=audit(1781254266.678:22944): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254266.678:22945): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254266.678:22946): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254266.682:22947): prog-id=1455 op=LOAD
type=BPF msg=audit(1781254266.682:22948): prog-id=1456 op=LOAD
type=BPF msg=audit(1781254266.683:22949): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254266.684:22950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254266.693:22951): prog-id=1457 op=LOAD
type=BPF msg=audit(1781254266.693:22952): prog-id=1458 op=LOAD
type=BPF msg=audit(1781254266.693:22953): prog-id=1459 op=LOAD
type=BPF msg=audit(1781254266.694:22954): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254266.694:22955): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254266.694:22956): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781254266.924:22957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd244c243e04440bda0df6f47690b4de1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781254267.388:22958): prog-id=1460 op=LOAD
type=BPF msg=audit(1781254267.388:22959): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.389:22960): prog-id=1461 op=LOAD
type=BPF msg=audit(1781254267.389:22961): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.390:22962): prog-id=1462 op=LOAD
type=BPF msg=audit(1781254267.390:22963): prog-id=1463 op=LOAD
type=BPF msg=audit(1781254267.390:22964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.390:22965): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.394:22966): prog-id=1464 op=LOAD
type=BPF msg=audit(1781254267.394:22967): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.394:22968): prog-id=1465 op=LOAD
type=BPF msg=audit(1781254267.394:22969): prog-id=1466 op=LOAD
type=BPF msg=audit(1781254267.394:22970): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.394:22971): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.395:22972): prog-id=1467 op=LOAD
type=BPF msg=audit(1781254267.395:22973): prog-id=1468 op=LOAD
type=BPF msg=audit(1781254267.395:22974): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.395:22975): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.398:22976): prog-id=1469 op=LOAD
type=BPF msg=audit(1781254267.398:22977): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781254267.457:22978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254267.460:22979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254267.497:22980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r54df16c7d42640e7b7019d2610e433e7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254267.531:22981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781254267.533:22982): prog-id=1470 op=LOAD
type=BPF msg=audit(1781254267.533:22983): prog-id=1471 op=LOAD
type=BPF msg=audit(1781254267.533:22984): prog-id=1472 op=LOAD
type=BPF msg=audit(1781254267.543:22985): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.543:22986): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.543:22987): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781254267.546:22988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781254267.547:22989): prog-id=1473 op=LOAD
type=BPF msg=audit(1781254267.547:22990): prog-id=1474 op=LOAD
type=BPF msg=audit(1781254267.571:22991): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254267.571:22992): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1781254267.571:22993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254267.615:22994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254267.679:22995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254267.711:22996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254267.829:22997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1781254268.278:22998): prog-id=1475 op=LOAD
type=BPF msg=audit(1781254268.278:22999): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.279:23000): prog-id=1476 op=LOAD
type=BPF msg=audit(1781254268.279:23001): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.279:23002): prog-id=1477 op=LOAD
type=BPF msg=audit(1781254268.279:23003): prog-id=1478 op=LOAD
type=BPF msg=audit(1781254268.279:23004): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.279:23005): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.283:23006): prog-id=1479 op=LOAD
type=BPF msg=audit(1781254268.283:23007): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.283:23008): prog-id=1480 op=LOAD
type=BPF msg=audit(1781254268.283:23009): prog-id=1481 op=LOAD
type=BPF msg=audit(1781254268.283:23010): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.283:23011): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.285:23012): prog-id=1482 op=LOAD
type=BPF msg=audit(1781254268.285:23013): prog-id=1483 op=LOAD
type=BPF msg=audit(1781254268.285:23014): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.285:23015): prog-id=0 op=UNLOAD
type=BPF msg=audit(1781254268.288:23016): prog-id=1484 op=LOAD
type=BPF msg=audit(1781254268.288:23017): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1781254268.336:23018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254268.340:23019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254268.341:23020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254268.342:23021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd244c243e04440bda0df6f47690b4de1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254268.343:23022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r54df16c7d42640e7b7019d2610e433e7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1781254268.917:23023): pid=160534 uid=0 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-rpm-macros-252-14.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781254268.917:23024): pid=160534 uid=0 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-libs-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781254268.917:23025): pid=160534 uid=0 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-pam-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781254268.917:23026): pid=160534 uid=0 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781254268.917:23027): pid=160534 uid=0 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="systemd-container-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1781254268.917:23028): pid=160534 uid=0 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-udev-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781254270.175:23029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254270.181:23030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254270.327:23031): pid=160521 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781254270.327:23032): pid=160521 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781254275.955:23033): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254275.955:23034): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1781254275.967:23035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254275.982:23036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254275.991:23037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254275.992:23038): pid=163790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=163790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1781254275.997:23039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.000:23040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.003:23041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.009:23042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.015:23043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.022:23044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.025:23045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.028:23046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.032:23047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254276.034:23048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254276.120:23049): pid=163773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=163790 suid=74 rport=39172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254276.121:23050): pid=163773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=163790 suid=74 rport=39172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254276.181:23051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.323:23052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.444:23053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.466:23054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.477:23055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.511:23056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.565:23057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.609:23058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.629:23059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.637:23060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.664:23061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.684:23062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.695:23063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254276.818:23064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254276.838:23065): pid=163773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="william" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254277.174:23066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254279.642:23067): pid=163773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=163790 suid=74 rport=39172 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254279.642:23068): pid=163773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=163790 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254279.644:23069): pid=163773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=163773 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254279.644:23070): pid=163773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254281.169:23071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254281.278:23072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254282.539:23073): pid=164609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=164609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254282.571:23074): pid=164608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=164609 suid=74 rport=38384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254282.571:23075): pid=164608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=164609 suid=74 rport=38384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254282.817:23076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254282.820:23077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254282.828:23078): pid=164608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sdtd" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254283.013:23079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254283.235:23080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254284.970:23081): pid=164608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=164609 suid=74 rport=38384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254284.970:23082): pid=164608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=164609 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254284.972:23083): pid=164608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=164608 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254284.972:23084): pid=164608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254284.988:23085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254285.191:23086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254289.374:23087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254289.385:23088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254289.551:23089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254289.723:23090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.325:23091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.357:23092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.365:23093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.370:23094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.375:23095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.379:23096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.384:23097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.388:23098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.425:23099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.436:23100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.439:23101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.442:23102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.444:23103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.447:23104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.451:23105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.454:23106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254296.457:23107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254296.873:23108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254298.181:23109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254298.184:23110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254298.185:23111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254298.192:23112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254299.978:23113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.010:23114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.019:23115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.031:23116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.094:23117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.235:23118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.245:23119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.486:23120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.506:23121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.622:23122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.690:23123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.739:23124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.752:23125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.772:23126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.788:23127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.794:23128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254300.842:23129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254301.031:23130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.178:23131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.182:23132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.185:23133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.188:23134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.192:23135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.196:23136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.202:23137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.204:23138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.209:23139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.213:23140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.222:23141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.227:23142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.233:23143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.241:23144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254307.250:23145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.516:23146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.531:23147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.635:23148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.692:23149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.732:23150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.750:23151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.787:23152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.882:23153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.899:23154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254307.941:23155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254308.006:23156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254308.011:23157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254308.079:23158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254308.138:23159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254308.317:23160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254309.521:23161): pid=166779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=166779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254310.297:23162): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254310.297:23163): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254310.299:23164): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=166789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254310.355:23165): pid=166805 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254310.356:23166): pid=166805 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6E677877707579797271636172726C67617972746F697A7A77627475646979203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254310.357:23167): pid=166805 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254310.362:23168): pid=166805 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781254312.173:23169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254312.348:23170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254313.168:23171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254313.277:23172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254313.347:23173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254313.609:23174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254314.859:23175): pid=166778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=166779 suid=74 rport=35102 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254314.859:23176): pid=166778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=166779 suid=74 rport=35102 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254315.082:23177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rc94195c0ef014b8b9306c6e34ccbcd01 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254315.119:23178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf7a3f8366559484d9d9591564374425c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1781254315.124:23179): pid=166812 uid=0 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="sos-4.8.2-2.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781254315.506:23180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254315.510:23181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254315.510:23182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254315.512:23183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rc94195c0ef014b8b9306c6e34ccbcd01 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254315.513:23184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rf7a3f8366559484d9d9591564374425c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254315.660:23185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254315.936:23186): pid=166778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1781254316.239:23187): pid=166805 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781254316.240:23188): pid=166805 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781254316.245:23189): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254316.245:23190): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254319.398:23191): pid=166778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=166779 suid=74 rport=35102 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254319.399:23192): pid=166778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=166779 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254319.400:23193): pid=166778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=166778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254319.400:23194): pid=166778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254320.174:23195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254320.179:23196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254320.395:23197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254320.455:23198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254327.170:23199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254327.322:23200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254328.349:23201): pid=168038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=168038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254328.573:23202): pid=168037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=168038 suid=74 rport=45258 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254328.573:23203): pid=168037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=168038 suid=74 rport=45258 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254329.174:23204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254329.176:23205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254329.370:23206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254329.398:23207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254329.567:23208): pid=168037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.186:23209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.190:23210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.194:23211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.198:23212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.314:23213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.318:23214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.482:23215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.504:23216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.518:23217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.524:23218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.533:23219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.606:23220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.633:23221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.654:23222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.683:23223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.737:23224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.796:23225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.800:23226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.805:23227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.826:23228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.832:23229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254330.934:23230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.935:23231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254330.993:23232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254331.093:23233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.116:23234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.139:23235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.205:23236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.235:23237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.249:23238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.273:23239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.282:23240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.305:23241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254331.324:23242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254333.421:23243): pid=168037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=168038 suid=74 rport=45258 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254333.422:23244): pid=168037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=168038 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254333.423:23245): pid=168037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=168037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254333.423:23246): pid=168037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.178:23247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.181:23248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.185:23249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.190:23250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.195:23251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.199:23252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.204:23253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.207:23254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.212:23255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.216:23256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.221:23257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.227:23258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.231:23259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.235:23260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254338.360:23261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.560:23262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.621:23263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.641:23264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.690:23265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.752:23266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.780:23267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.795:23268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.807:23269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.847:23270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.848:23271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.849:23272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254338.915:23273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254339.040:23274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254339.087:23275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254339.218:23276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254339.955:23277): pid=169667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=169667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254340.043:23278): pid=169666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=169667 suid=74 rport=51820 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254340.043:23279): pid=169666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=169667 suid=74 rport=51820 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254340.467:23280): pid=169666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sol" exe="/usr/sbin/sshd" hostname=45.148.10.183 addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254341.363:23281): pid=169724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=169724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254341.495:23282): pid=169723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=169724 suid=74 rport=42714 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254341.496:23283): pid=169723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=169724 suid=74 rport=42714 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254342.135:23284): pid=169723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ts3" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254342.919:23285): pid=169666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=169667 suid=74 rport=51820 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254342.919:23286): pid=169666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=169667 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254342.921:23287): pid=169666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=169666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254342.921:23288): pid=169666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254342.938:23289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254343.083:23290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254344.178:23291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254344.182:23292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254344.397:23293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254344.525:23294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254346.171:23295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254346.356:23296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254346.526:23297): pid=169723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=169724 suid=74 rport=42714 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254346.527:23298): pid=169723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=169724 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254346.528:23299): pid=169723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=169723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254346.528:23300): pid=169723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254351.173:23301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254351.177:23302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254351.381:23303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254351.410:23304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254352.081:23305): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254352.081:23306): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254352.083:23307): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=171003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254352.160:23308): pid=171017 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254352.160:23309): pid=171017 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676371706773737A6B787863647769706B666B64777A676675726B656C767576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254352.162:23310): pid=171017 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254352.168:23311): pid=171017 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781254358.127:23312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254358.269:23313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.177:23314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.182:23315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254360.416:23316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254360.431:23317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.538:23318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.542:23319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.549:23320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.631:23321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.658:23322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254360.662:23323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.738:23324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254360.803:23325): pid=171017 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781254360.803:23326): pid=171017 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781254360.808:23327): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254360.808:23328): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1781254360.820:23329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254360.863:23330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254360.878:23331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.992:23332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254360.997:23333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.088:23334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.150:23335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.169:23336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.173:23337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.182:23338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.224:23339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.225:23340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.273:23341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.278:23342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.284:23343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.289:23344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.324:23345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254361.328:23346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.450:23347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.464:23348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.548:23349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.573:23350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.611:23351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.651:23352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.683:23353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.696:23354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254361.745:23355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254368.645:23356): pid=172840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=172840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254368.771:23357): pid=172839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=172840 suid=74 rport=42406 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254368.771:23358): pid=172839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=172840 suid=74 rport=42406 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254369.188:23359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.191:23360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.194:23361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.197:23362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.200:23363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.203:23364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.209:23365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.212:23366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.214:23367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.216:23368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.218:23369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.220:23370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.239:23371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.242:23372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254369.246:23373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254369.405:23374): pid=172839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.616:23375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.636:23376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.690:23377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.714:23378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.744:23379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.768:23380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.780:23381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.820:23382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.867:23383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.881:23384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.920:23385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.966:23386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254369.977:23387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254370.015:23388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254370.059:23389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254371.555:23390): pid=172839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=172840 suid=74 rport=42406 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254371.555:23391): pid=172839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=172840 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254371.557:23392): pid=172839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=172839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254371.557:23393): pid=172839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254373.175:23394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254373.334:23395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254375.173:23396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254375.176:23397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254375.371:23398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254375.480:23399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254377.174:23400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254377.282:23401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254382.168:23402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254382.171:23403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254382.516:23404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254382.757:23405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254384.099:23406): pid=174293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=174293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254384.838:23407): pid=174292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=174293 suid=74 rport=45414 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254384.838:23408): pid=174292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=174293 suid=74 rport=45414 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254385.687:23409): pid=174292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="wushi" exe="/usr/sbin/sshd" hostname=186.115.52.67 addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254388.283:23410): pid=174292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=174293 suid=74 rport=45414 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254388.284:23411): pid=174292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=174293 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254388.285:23412): pid=174292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=174292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254388.285:23413): pid=174292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.115.52.67 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254388.303:23414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254388.447:23415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.183:23416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.186:23417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.190:23418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.194:23419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.198:23420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.203:23421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.219:23422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.222:23423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.227:23424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.229:23425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.469:23426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.481:23427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.484:23428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.498:23429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.554:23430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.566:23431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.611:23432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.625:23433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.628:23434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.685:23435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.689:23436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.690:23437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.716:23438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.727:23439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.735:23440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254391.757:23441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.764:23442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.837:23443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.897:23444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.911:23445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.920:23446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254391.975:23447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254392.016:23448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254392.061:23449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254392.074:23450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254392.088:23451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254392.104:23452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254392.135:23453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.189:23454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.195:23455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.200:23456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.211:23457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.218:23458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.224:23459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.230:23460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.235:23461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.240:23462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.245:23463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.251:23464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.255:23465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.259:23466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.262:23467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254400.265:23468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1781254400.279:23469): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254400.279:23470): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254400.281:23471): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=175666 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254400.481:23472): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254400.481:23473): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1781254400.699:23474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.712:23475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.764:23476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.778:23477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.833:23478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.834:23479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.851:23480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.879:23481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.901:23482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.941:23483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254400.958:23484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254401.008:23485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254401.057:23486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254401.112:23487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254401.235:23488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254404.173:23489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254404.310:23490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254406.171:23491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254406.174:23492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254406.410:23493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254406.558:23494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254408.028:23495): pid=176461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=176461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254408.060:23496): pid=176460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=176461 suid=74 rport=41466 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254408.060:23497): pid=176460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=176461 suid=74 rport=41466 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254408.174:23498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254408.316:23499): pid=176460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="git" exe="/usr/sbin/sshd" hostname=31.59.40.94 addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254408.352:23500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254411.020:23501): pid=176460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=176461 suid=74 rport=41466 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254411.020:23502): pid=176460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=176461 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254411.023:23503): pid=176460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=176460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254411.023:23504): pid=176460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.59.40.94 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254413.169:23505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254413.171:23506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254413.392:23507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254413.447:23508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254419.167:23509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254419.337:23510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.190:23511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.196:23512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.201:23513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.205:23514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.210:23515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.214:23516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.218:23517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.222:23518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.226:23519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.229:23520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.232:23521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.235:23522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.238:23523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.244:23524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.248:23525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.251:23526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.254:23527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.257:23528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254422.260:23529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.488:23530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.648:23531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.676:23532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.691:23533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.706:23534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.722:23535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.742:23536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.792:23537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.878:23538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.925:23539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.932:23540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.959:23541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.993:23542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254422.997:23543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254423.038:23544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254423.069:23545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254423.080:23546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254423.110:23547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254423.113:23548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.183:23549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.186:23550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.189:23551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.192:23552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.195:23553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.199:23554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.203:23555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.206:23556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254431.207:23557): pid=178386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=178386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1781254431.210:23558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.214:23559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.217:23560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.220:23561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.224:23562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.240:23563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254431.246:23564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1781254431.327:23565): pid=178360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=178386 suid=74 rport=46098 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254431.328:23566): pid=178360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=178386 suid=74 rport=46098 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1781254431.426:23567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.442:23568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.641:23569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.682:23570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.714:23571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.721:23572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.738:23573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.748:23574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.813:23575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.837:23576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.865:23577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254431.900:23578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254431.915:23579): pid=178360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=154.83.196.237 addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254432.003:23580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254432.024:23581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254432.385:23582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254435.179:23583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254435.347:23584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254435.673:23585): pid=178360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=178386 suid=74 rport=46098 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254435.674:23586): pid=178360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=178386 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254435.675:23587): pid=178360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=178360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254435.675:23588): pid=178360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.83.196.237 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254436.201:23589): pid=179049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=179049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254436.414:23590): pid=179048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=179049 suid=74 rport=32866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254436.414:23591): pid=179048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=179049 suid=74 rport=32866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254437.174:23592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254437.179:23593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254437.350:23594): pid=179048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="william" exe="/usr/sbin/sshd" hostname=36.255.220.145 addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254437.361:23595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254437.497:23596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254439.173:23597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254439.308:23598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254440.361:23599): pid=179048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179049 suid=74 rport=32866 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254440.361:23600): pid=179048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=179049 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254440.362:23601): pid=179048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=179048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254440.362:23602): pid=179048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=36.255.220.145 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254444.176:23603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254444.179:23604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254444.361:23605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254444.431:23606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254450.177:23607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254450.368:23608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254450.759:23609): pid=179999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=179999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254450.967:23610): pid=179998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=179999 suid=74 rport=47730 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254450.967:23611): pid=179998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=179999 suid=74 rport=47730 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254451.901:23612): pid=179998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=154.221.20.92 addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.189:23613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.193:23614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.197:23615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.203:23616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.206:23617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.210:23618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.213:23619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.217:23620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.220:23621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.223:23622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.225:23623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.228:23624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.230:23625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.234:23626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.237:23627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.239:23628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.241:23629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.244:23630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254453.247:23631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.587:23632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.613:23633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.622:23634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.669:23635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.684:23636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.684:23637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.693:23638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.798:23639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.851:23640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.868:23641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.907:23642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.949:23643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254453.968:23644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254454.030:23645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254454.053:23646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254454.090:23647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254454.104:23648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254454.155:23649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254454.242:23650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254455.041:23651): pid=179998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179999 suid=74 rport=47730 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254455.041:23652): pid=179998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=179999 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254455.043:23653): pid=179998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=179998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254455.043:23654): pid=179998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.221.20.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254460.498:23655): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=160493 suid=1000 rport=49660 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254460.499:23656): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254460.505:23657): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781254460.505:23658): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254460.506:23659): pid=160471 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=160471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1781254463.257:23660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.268:23661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.271:23662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.272:23663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.274:23664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.276:23665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.278:23666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.281:23667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.283:23668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.285:23669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.287:23670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.289:23671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.295:23672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.301:23673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254463.308:23674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.605:23675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.739:23676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.754:23677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.783:23678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.811:23679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.821:23680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.833:23681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.842:23682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.871:23683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.882:23684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.887:23685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.931:23686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.944:23687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254463.991:23688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254464.332:23689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254465.820:23690): pid=181569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254465.946:23691): pid=181568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=181569 suid=74 rport=55218 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254465.946:23692): pid=181568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=181569 suid=74 rport=55218 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254466.177:23693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254466.331:23694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254466.532:23695): pid=181603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254467.095:23696): pid=181602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=181603 suid=74 rport=37384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254467.096:23697): pid=181602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=181603 suid=74 rport=37384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1781254467.940:23698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254467.943:23699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254468.012:23700): pid=181602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sol" exe="/usr/sbin/sshd" hostname=45.148.10.183 addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254469.098:23701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d15dcf0803862345c227b1081ef2ff8751b58b38e4d81dbbe5ae4c6dadc39473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254469.217:23702): pid=181743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1781254469.400:23703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cba847255c0045507ee5cdc62fdc35748b16512fc738068a56f288e0aa4cad4d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254469.416:23704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254469.547:23705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2fb1f1a4875cd879ce6632df029e72ba2a0a6dbad71d73b2666c109ee5ffa097 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254469.734:23706): pid=181568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="client" exe="/usr/sbin/sshd" hostname=178.176.224.83 addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254470.456:23707): pid=181602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181603 suid=74 rport=37384 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254470.457:23708): pid=181602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181603 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254470.458:23709): pid=181602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254470.458:23710): pid=181602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.183 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254470.674:23711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254473.907:23712): pid=181568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181569 suid=74 rport=55218 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254473.907:23713): pid=181568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181569 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254473.909:23714): pid=181568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254473.909:23715): pid=181568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.176.224.83 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254476.599:23716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254476.602:23717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254477.315:23718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34214fa15507b2f8114a5706e68e138747e642fd9d6cebf94f218284ceb8aa91 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254477.478:23719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40a6a69c5565c3cc3c239b7e1d3edf6560319eed16f4a727982beb94d09eefca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254479.619:23720): pid=182354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=182354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254479.620:23721): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=182354 suid=74 rport=48450 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254479.621:23722): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=182354 suid=74 rport=48450 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254479.700:23723): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254479.714:23724): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254479.742:23725): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254479.742:23726): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254479.766:23727): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254479.767:23728): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182354 suid=74 rport=48450 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781254479.770:23729): pid=182351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781254479.770:23730): pid=182351 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781254479.770:23730): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdf2b607a0 a2=4 a3=3e8 items=0 ppid=38621 pid=182351 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254479.770:23730): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781254479.772:23731): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1781254479.821:23732): pid=182405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1781254479.821:23733): pid=182405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1781254479.821:23734): pid=182405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781254479.822:23735): pid=182405 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781254479.822:23735): arch=c000003e syscall=1 success=yes exit=4 a0=9 a1=7fff72436380 a2=4 a3=3e8 items=0 ppid=1 pid=182405 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254479.822:23735): proctitle="(systemd)"
type=USER_START msg=audit(1781254479.825:23736): pid=182405 uid=0 auid=1000 ses=25 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1781254480.092:23737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1781254480.115:23738): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254480.117:23739): pid=182469 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=182469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1781254480.119:23740): pid=182469 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781254480.164:23741): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254480.164:23742): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254480.166:23743): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=182470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254480.228:23744): pid=182485 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254480.228:23745): pid=182485 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A786B786D766D757869666E716470646D77617A737A61766D6F7768756261203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254480.230:23746): pid=182485 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254480.235:23747): pid=182485 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781254480.781:23748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254480.936:23749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dab7386321d700797926f58a8eff8b77bd1dc7694778477bcfeaff959371a47a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1781254481.034:23750): pid=182485 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1781254481.034:23751): pid=182485 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1781254481.040:23752): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1781254481.040:23753): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254482.190:23754): pid=181742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181743 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1781254482.190:23755): pid=181742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=181742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1781254482.191:23756): pid=181742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.48.34.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.182:23757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.186:23758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.191:23759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.195:23760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.200:23761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.204:23762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.211:23763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.216:23764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.221:23765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.224:23766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.228:23767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.231:23768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.234:23769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.239:23770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.241:23771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.244:23772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.246:23773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.259:23774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254484.263:23775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.637:23776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b9364ab45a3cfd9a3d8b4886b010f63054238474b13fb9dce69720a7eddd2652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.701:23777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=183d14301dfcadb3513bd5475496d3995ee6b6180927e3962fd6db00e147c408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.733:23778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c261df2f479ed5deff7fa99ecdd3fa7cd8cfc3b0ac41cbc3bf02557f1dfba433 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.734:23779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f93b0b6bd5a1582824793410cdaf77cb80bab19a975dca5de8e9cfa7a55385eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.751:23780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9540c020f435041b8ae99fdc9a8256e0abfc0d340ad990524c4206a459b31619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.769:23781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=72f8a12fcf66d7bdf7e2cd9759172cf5ab8ef9369725b0ef893fd13b8b7420ce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.791:23782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96cf04ec0779dc54e3c3ba01d0f100dad7ec3c18e56d80cd9de978706b58d712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254484.832:23783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6bb08d8601723afd501c903181305c49e39c4eaf230fd866ab58ef4b911dbb29 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.095:23784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=52b133ebf5a4ed254a8658a931001426849a184455250045f9e5b36a4f64da67 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.128:23785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3e2905420e55abcd3f9b90e412f08fd3f5fb0880c125be1136c914463ee0b9d7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.143:23786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60c36157d789a266816d19b6c0f342223b22387327f1666b58634fce373e7a16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.166:23787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=81eed1447800a1429a9b8ff43fb2c3ca3349dfee7b05ee40f591badf380b3a31 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.242:23788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8903adb7ae329ebd336c3996ce8e204f473948ca633da5cffa294c0555d200de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.254:23789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7899ee8e81d9b24ed689e911352f75d6a82966f4ae7b58c86825d0c9758cc6ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.313:23790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a588eea6ada2b753bfe2d20c64a83eb69bd172a5157cb39cccf80295532366e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.321:23791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5977ef2760bc8c365a12f0fd3c0910bba49ef41752ecbbd6d0d1e32c87166765 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.342:23792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=647abc8b39380dbb10bb57abb5dad42d6790d2ded6743687ac352d0e528e1496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.390:23793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0d46402e1f7230ba442e3a93f83d0c4310fb47131f6422af6ee6d21b62ecbc20 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254485.477:23794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=00928d24f387672457f94bb2ca9dd47cfc492702688f6b1dff0c507b4573fdd7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254486.502:23795): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182469 suid=1000 rport=48450 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254486.502:23796): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=182469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1781254486.506:23797): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1781254486.507:23798): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254486.507:23799): pid=182351 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=182351 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1781254494.175:23800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.178:23801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.180:23802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.183:23803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.185:23804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.188:23805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.192:23806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.195:23807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.202:23808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.205:23809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.208:23810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.211:23811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.216:23812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.220:23813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1781254494.349:23814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.663:23815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=565413f53149434fb3769758cc3d9a691982bf2b6abb998d65a88d440ff17483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.683:23816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=703918fa9cf675fa5705b22ccd63c18c749fefd550f023196577cb5d15d56eba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.688:23817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e5bae3ef76afd5f9a30c36074ff192b3b7f5b6278ef010e640a4cdd225314b0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.707:23818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ca323f3ed293a1515ea259d71a0f978533f30f0bf51f03ec94092125adef4879 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.716:23819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=04eb1913846a1ef0c968cebac6963e612a5b3cac9d8e390f7c19f3031ce15520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.807:23820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a9d85ca8eb33ac94261a37ccccdafb83e0914180c71ad73aadad0c0985562309 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.840:23821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=14da9f33b2e030ebfaed62e5b7471b1aa532bbd90a5ead8355a809f712111502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.859:23822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e54f4b1b575122d45c2eb9bdf502bfd4758e9eebc05652621cfc35154c2f3b2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.907:23823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34756b6284b96f826eac108e844ded9c8de9c09077df73d77a33de0a65f2c1b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.933:23824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4f43465f295dd10aa75cfc4d7ab5b5e50c3a7ca42e2f1cba6a6ba1ebcbe1e3a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.943:23825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=85ffe8419d836592cdd69d965258705de8af717be5b4a59829801ecee2d90576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.978:23826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d67fc30cf1cbdc3102cad3537d243cedeb09e5ebd6cc6415e75b144828fed090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254494.996:23827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f156ee846ec39dec00ee7701ddc63450fe9e5edbebfdd7a986432bf867ce189b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254495.044:23828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e7dd0814c7bd950b4707e9006da681bf646f752ac8a227e96cd1a0dfc6b83461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1781254495.413:23829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c475cb740548c247f8ccdc8bb14c05374b9fff8714e762bbf54ad8fa4a0b1970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254495.664:23830): pid=184154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=184154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1781254495.666:23831): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=184154 suid=74 rport=56290 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1781254495.667:23832): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=184154 suid=74 rport=56290 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1781254495.751:23833): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254495.763:23834): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1781254495.829:23835): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254495.829:23836): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ef:7c:f7:db:a3:8c:ce:38:0c:f6:3d:91:e5:e3:be:97:5f:8b:0c:66:9f:f7:3b:b6:c2:78:6d:12:ca:6a:47:42 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1781254495.850:23837): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1781254495.850:23838): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184154 suid=74 rport=56290 laddr=38.102.83.189 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1781254495.852:23839): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1781254495.852:23840): pid=184153 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1781254495.852:23840): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff304ed2e0 a2=4 a3=3e8 items=0 ppid=38621 pid=184153 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1781254495.852:23840): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1781254495.854:23841): pid=184153 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1781254495.885:23842): pid=184153 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254495.886:23843): pid=184187 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=184187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1781254495.888:23844): pid=184187 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.32 addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1781254495.897:23845): pid=184153 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1781254495.897:23846): pid=184153 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.32 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1781254495.900:23847): pid=184153 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:10:d1:03:f8:3e:74:dc:5d:21:cc:a1:89:36:51:80:a5:46:54:85:64:46:7a:5b:fa:bc:d5:3c:4a:b7:3a:b2:58 direction=? spid=184199 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1781254495.970:23848): pid=184199 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1781254495.970:23849): pid=184199 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843497675202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1781254495.971:23850): pid=184199 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1781254495.976:23851): pid=184199 uid=1000 auid=1000 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1781254496.402:23852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a78849af22c977c04c94ce14777a63d06406827111424c388d540bb5ca6e9397 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"